Denial of Service in VMware ESXi and ESX
CVE-2012-5703

Currently unrated

Key Information:

Vendor: Vmware
Status: Esxi; Esx
Vendor: CVE Published:; 20 November 2012

Summary

A vulnerability in the vSphere API of VMware ESXi and ESX allows remote attackers to induce a denial of service condition, leading to potential system unavailability. This is achieved by sending invalid values in RetrieveProp or RetrievePropEx SOAP requests, which can cause the host daemon to crash. Security measures are advised to mitigate the risks associated with this vulnerability.

References

http://www.securitytracker.com/id?1027782

vdb-entryx_refsource_SECTRACK

http://www.securityfocus.com/bid/56571

vdb-entryx_refsource_BID

http://www.coresecurity.com/content/vmware-esx-input-vali...

x_refsource_MISC

Timeline

Vulnerability published
Nov 20, 2012
Vulnerability Reserved
Oct 31, 2012