Vmware Esxi And Vmware Cloud Foundation

ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelming rhttpproxy service with multiple requests.

Published: 2022-02-16T16:37:56.000Z
Updated: 2024-08-03T18:30:23.946Z

VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escalate their privileges by writing arbitrary files.

Published: 2022-02-16T16:37:55.000Z
Updated: 2024-08-03T18:30:24.011Z

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user.

Published: 2022-02-16T16:37:54.000Z
Updated: 2024-08-03T18:30:23.952Z

OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi may be able to trigger a heap out-of-bounds read in OpenSLP service resulting in a denial-of-service condition.

Published: 2021-07-13T18:05:49.000Z
Updated: 2024-08-03T18:30:23.592Z

SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request.

Published: 2021-07-13T18:05:43.000Z
Updated: 2024-08-03T18:30:23.556Z