CVE-2023-34048 — VMware vCenter Server Out-of-Bounds Write Vulnerability

Description (CNA)

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Affected (CNA)

Vendor / product	Versions
VMware / VMware vCenter Server	affected 8.0 before 8.0U2; affected 7.0 before 7.0U3o
VMware / VMware Cloud Foundation (VMware vCenter Server)	affected 5.x; affected 4.x

CWE

No CWE identifiers supplied.

References

https://www.vmware.com/security/advisories/VMSA-2023-0023.html

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-34048

CVE

No English description supplied.

https://www.vmware.com/security/advisories/VMSA-2023-0023.html
https://www.vicarius.io/vsociety/posts/understanding-cve-2023-34048-a-zero-day-out-of-bound-write-in-vcenter-server