PT-2024-3782 · Vmware · Vmware Fusion+2

Hao Zheng + 3 · Published 2024-05-21 · Updated 2025-03-26 · CVE-2024-22273

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware ESXi, Workstation, and Fusion (affected versions not specified)

Description The storage controllers on VMware ESXi, Workstation, and Fusion have an out-of-bounds read/write issue. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2024-04135

CVE-2024-22273

Affected Products

Vmware Esxi

Vmware Fusion

Vmware Workstation

References · 14

• https://osv.dev/vulnerability/CVE-2024-22273 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22273 · Security Note
• https://bdu.fstec.ru/vul/2024-04135 · Security Note
• https://twitter.com/cracbot/status/1793522372190040120 · Twitter Post
• https://twitter.com/VFrontDe/status/1792957005377745290 · Twitter Post
• https://t.me/cvenotify/116367 · Telegram Post
• https://twitter.com/ariendg/status/1793340984215912540 · Twitter Post
• https://t.me/cvenotify/80598 · Telegram Post
• https://t.me/cvenotify/80671 · Telegram Post
• https://twitter.com/linuxpatch/status/1792995155772866698 · Twitter Post
• https://t.me/cvenotify/112940 · Telegram Post
• https://vuldb.com/sv/?id.265641 · Note
• https://twitter.com/CveFindCom/status/1792993884848496740 · Twitter Post