VMware vCenter Server Out-of-Bounds Write Vulnerability

概要

参考情報

• vmware.com/security/advisories/VMSA-2023-0023.html · Vendor Advisory
• vicarius.io/vsociety/posts/understanding-cve-2023-34048-a-zero-day-out-of-bound-write-in-vcenter-server · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2023-34048

vcenter server のその他の脆弱性

• CVE-2026-59310緊急 9.8悪用確認済み（CISA KEV）VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may explo…
• CVE-2026-59309緊急 9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCe…
• CVE-2024-38813緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this v…
• CVE-2024-38812緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network acces…
• CVE-2024-37087中 5.3The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-o…