CVE-2024-22254 - Vulnerability Details - OpenCVE

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.vmware.com/security/advisories/VMSA-2024-0006.html

History

Wed, 14 Aug 2024 20:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-787

MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2024-03-05T17:58:24.341Z

Updated: 2024-08-14T18:53:20.387Z

Reserved: 2024-01-08T18:43:15.942Z

Link: CVE-2024-22254

Vulnrichment

Updated: 2024-08-01T22:43:33.752Z

NVD

Status : Awaiting Analysis

Published: 2024-03-05T18:15:48.100

Modified: 2024-11-21T08:55:53.910

Link: CVE-2024-22254

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22254", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2024-01-08T18:43:15.942Z", "datePublished": "2024-03-05T17:58:24.341Z", "dateUpdated": "2024-08-14T18:53:20.387Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "VMware ESXi", "vendor": "n/a", "versions": [{"lessThan": "ESXi80U2sb-23305545", "status": "affected", "version": "8.0", "versionType": "custom"}, {"lessThan": "ESXi80U1d-23299997", "status": "affected", "version": "8.0", "versionType": "custom"}, {"lessThan": "ESXi70U3p-23307199", "status": "affected", "version": "7.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "VMware Cloud Foundation", "vendor": "n/a", "versions": [{"status": "affected", "version": "5.x"}, {"status": "affected", "version": "4.x"}]}], "datePublic": "2024-03-05T04:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "VMware ESXi contains an out-of-bounds write vulnerability. <span style=\"background-color: var(--wht);\">A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.</span><div><div><div><div><div><br></div></div></div></div></div><br>"}], "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.9, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2024-03-05T17:59:53.114Z"}, "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"}], "source": {"discovery": "UNKNOWN"}, "title": "Out-of-bounds write vulnerability", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-787", "lang": "en", "description": "CWE-787 Out-of-bounds Write"}]}], "affected": [{"vendor": "vmware", "product": "vmware_esxi", "cpes": ["cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "8.0", "status": "affected", "lessThan": "ESXi80U2sb-23305545", "versionType": "custom"}, {"version": "8.0", "status": "affected", "lessThan": "ESXi80U1d-23299997", "versionType": "custom"}, {"version": "7.0", "status": "affected", "lessThan": "ESXi70U3p-23307199", "versionType": "custom"}]}, {"vendor": "broadcom", "product": "vmware_cloud_foundation", "cpes": ["cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "5.0", "status": "affected"}, {"version": "4.0", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-14T18:20:04.440392Z", "id": "CVE-2024-22254", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T18:53:20.387Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:43:33.752Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:43:33.752Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22254", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-14T18:20:04.440392Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*"], "vendor": "vmware", "product": "vmware_esxi", "versions": [{"status": "affected", "version": "8.0", "lessThan": "ESXi80U2sb-23305545", "versionType": "custom"}, {"status": "affected", "version": "8.0", "lessThan": "ESXi80U1d-23299997", "versionType": "custom"}, {"status": "affected", "version": "7.0", "lessThan": "ESXi70U3p-23307199", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*"], "vendor": "broadcom", "product": "vmware_cloud_foundation", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "4.0"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:16.836Z"}}], "cna": {"title": "Out-of-bounds write vulnerability", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.9, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "n/a", "product": "VMware ESXi", "versions": [{"status": "affected", "version": "8.0", "lessThan": "ESXi80U2sb-23305545", "versionType": "custom"}, {"status": "affected", "version": "8.0", "lessThan": "ESXi80U1d-23299997", "versionType": "custom"}, {"status": "affected", "version": "7.0", "lessThan": "ESXi70U3p-23307199", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "n/a", "product": "VMware Cloud Foundation", "versions": [{"status": "affected", "version": "5.x"}, {"status": "affected", "version": "4.x"}], "defaultStatus": "unaffected"}], "datePublic": "2024-03-05T04:00:00.000Z", "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n", "supportingMedia": [{"type": "text/html", "value": "VMware ESXi contains an out-of-bounds write vulnerability. <span style=\"background-color: var(--wht);\">A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.</span><div><div><div><div><div><br></div></div></div></div></div><br>", "base64": false}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2024-03-05T17:59:53.114Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22254", "state": "PUBLISHED", "dateUpdated": "2024-08-14T18:53:20.387Z", "dateReserved": "2024-01-08T18:43:15.942Z", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "datePublished": "2024-03-05T17:58:24.341Z", "assignerShortName": "vmware"}, "dataVersion": "5.1"}