Heap Overflow Vulnerability in VMware ESXi
CVE-2022-31699
3.3LOW
Key Information:
- Vendor
- Vmware
- Vendor
- CVE Published:
- 13 December 2022
Summary
VMware ESXi is susceptible to a heap overflow vulnerability, which may allow a malicious local actor with limited privileges operating within a sandboxed environment to exploit the flaw. This exploitation can lead to partial information disclosure, posing a risk to sensitive data integrity. Administrators should be aware of this vulnerability to implement necessary mitigations.
Affected Version(s)
VMware ESXi, VMware Cloud Foundation VMware ESXi (7.0 prior to ESXi70U3si-20841705, 6.7 prior to ESXi670-202210101-SG, 6.5 prior to ESXi650-202210101-SG), VMware Cloud Foundation (4.x, 3.x)
References
CVSS V3.1
Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved