PT-2015-2315 · Vmware · Vmware Vcenter Server+1

Published 2015-05-22 · Updated 2018-08-12 · CVE-2015-1047

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 5.0 through 5.0 u3e VMware vCenter Server versions 5.1 through 5.1 u3 VMware vCenter Server versions 5.5 through 5.5 u2

Description The issue allows remote attackers to cause a denial of service. This is due to insufficient input validation in the Host heartbeat service of VMware vCenter Server. An attacker can exploit this by sending a specially crafted UDP packet to port 902, containing a string larger than 217 bytes, which can cause the service to crash.

Recommendations For versions 5.0 through 5.0 u3e, update to version 5.0 u3e or later. For versions 5.1 through 5.1 u3, update to version 5.1 u3 or later. For versions 5.5 through 5.5 u2, update to version 5.5 u2 or later. As a temporary workaround, consider restricting access to port 902 to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-11677

CVE-2015-1047

Affected Products

Vmware Vcenter

Vmware Vcenter Server

References · 6

• https://bdu.fstec.ru/vul/2015-11677 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1047 · Security Note
• http://vmware.com/security/advisories/VMSA-2015-0007.html · Vendor Advisory
• http://securitytracker.com/id/1033720 · Note
• http://securityfocus.com/bid/76932 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1047 · Note