PT-2024-4542 · Vmware · Vmware Esxi

Hao Zheng + 3 · Published 2024-06-25 · Updated 2025-06-27 · CVE-2024-37086

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions: VMware ESXi (affected versions not specified)

Description: The issue is related to an out-of-bounds read, which can be triggered by a malicious actor with local administrative privileges on a virtual machine that has an existing snapshot. This can lead to a denial-of-service condition of the host.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2024-05046

CVE-2024-37086

Affected Products

Vmware Esxi

References · 17

• https://osv.dev/vulnerability/CVE-2024-37086 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-37086 · Security Note
• https://bdu.fstec.ru/vul/2024-05046 · Security Note
• https://twitter.com/vspinmaster/status/1888612690442002456 · Twitter Post
• https://twitter.com/vspinmaster/status/1915776340642459685 · Twitter Post
• https://twitter.com/vspinmaster/status/1854336329280102705 · Twitter Post
• https://twitter.com/viwviktoria/status/1824380912181629380 · Twitter Post
• https://twitter.com/yrenato81/status/1826108941933154684 · Twitter Post
• https://twitter.com/scandaletti/status/1824378013527707800 · Twitter Post
• https://t.me/cvenotify/126884 · Telegram Post
• https://t.me/cvenotify/101425 · Telegram Post
• https://twitter.com/vspinmaster/status/1895029964128276869 · Twitter Post
• https://twitter.com/vspinmaster/status/1824088719915098391 · Twitter Post
• https://twitter.com/vspinmaster/status/1836701144153755992 · Twitter Post