8.1
CVSS
HIGH
EPSS0.3%(54th)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 1.4 | Impact: 6.0

Affected Packages8 packages

CVEListV5vmware_esxi8.0ESXi80U2sb-23305545+1
CVEListV5vmware_fusion13.x13.5.1
NVDvmware/fusion13.0.013.5.1
CVEListV5vmware_workstation17.x17.5.1
NVDvmware/workstation17.0.017.5.1
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.

🔴Vulnerability Details

2
GHSA
GHSA-9mq7-wpm3-gv26: The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability2024-05-21
CVEList
CVE-2024-22273: The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability2024-05-21

📋Vendor Advisories

1
Red Hat
kernel: usb: vhci-hcd: Do not drop references before new references are gained2024-08-23
CVE-2024-22273 (HIGH CVSS 8.1) | The storage controllers on VMware E | cvebase.io