Out-of-Bounds Read Vulnerability in VMware vCenter Server

CVE-2023-20896

Summary

The VMware vCenter Server exposes an out-of-bounds read vulnerability stemming from issues in the DCERPC protocol implementation. Exploitation of this vulnerability requires network access, allowing a malicious actor to send specifically crafted packets to the vCenter Server which may lead to an out-of-bounds read. This can consequently cause disruptions and potential denial-of-service in critical services such as vmcad, vmdird, and vmafdd, impacting the availability and functionality of the server.

References