Lucene search
HistoryDec 13, 2022 - 4:15 p.m.
CVE-2022-31698
vcenter server
dos
content library
vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
40.5%
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Affected configurations
Node
vmwarecloud_foundationMatch3.0
ORvmwarecloud_foundationMatch3.0.1
ORvmwarecloud_foundationMatch3.0.1.1
ORvmwarecloud_foundationMatch3.5
ORvmwarecloud_foundationMatch3.5.1
ORvmwarecloud_foundationMatch3.7
ORvmwarecloud_foundationMatch3.7.1
ORvmwarecloud_foundationMatch3.7.2
ORvmwarecloud_foundationMatch3.8
ORvmwarecloud_foundationMatch3.8.1
ORvmwarecloud_foundationMatch3.9
ORvmwarecloud_foundationMatch3.9.1
ORvmwarecloud_foundationMatch3.10
ORvmwarecloud_foundationMatch3.10.1
ORvmwarecloud_foundationMatch3.10.1.1
ORvmwarecloud_foundationMatch3.10.1.2
ORvmwarecloud_foundationMatch3.10.2.1
ORvmwarecloud_foundationMatch3.10.2.2
ORvmwarecloud_foundationMatch3.11
ORvmwarecloud_foundationMatch4.0
ORvmwarecloud_foundationMatch4.0.1
ORvmwarecloud_foundationMatch4.1
ORvmwarecloud_foundationMatch4.1.0.1
ORvmwarecloud_foundationMatch4.2
ORvmwarecloud_foundationMatch4.2.1
ORvmwarecloud_foundationMatch4.3
ORvmwarecloud_foundationMatch4.3.1
ORvmwarecloud_foundationMatch4.4
ORvmwarecloud_foundationMatch4.4.1
ORvmwarecloud_foundationMatch4.4.1.1
ORvmwarevcenter_serverMatch6.5-
ORvmwarevcenter_serverMatch6.5a
ORvmwarevcenter_serverMatch6.5b
ORvmwarevcenter_serverMatch6.5c
ORvmwarevcenter_serverMatch6.5d
ORvmwarevcenter_serverMatch6.5e
ORvmwarevcenter_serverMatch6.5f
ORvmwarevcenter_serverMatch6.5update1
ORvmwarevcenter_serverMatch6.5update1b
ORvmwarevcenter_serverMatch6.5update1c
ORvmwarevcenter_serverMatch6.5update1d
ORvmwarevcenter_serverMatch6.5update1e
ORvmwarevcenter_serverMatch6.5update1g
ORvmwarevcenter_serverMatch6.5update2
ORvmwarevcenter_serverMatch6.5update2b
ORvmwarevcenter_serverMatch6.5update2c
ORvmwarevcenter_serverMatch6.5update2d
ORvmwarevcenter_serverMatch6.5update2g
ORvmwarevcenter_serverMatch6.5update3
ORvmwarevcenter_serverMatch6.5update3d
ORvmwarevcenter_serverMatch6.5update3f
ORvmwarevcenter_serverMatch6.5update3k
ORvmwarevcenter_serverMatch6.5update3n
ORvmwarevcenter_serverMatch6.5update3p
ORvmwarevcenter_serverMatch6.5update3q
ORvmwarevcenter_serverMatch6.5update3r
ORvmwarevcenter_serverMatch6.5update3s
ORvmwarevcenter_serverMatch6.5update3t
ORvmwarevcenter_serverMatch6.7-
ORvmwarevcenter_serverMatch6.7a
ORvmwarevcenter_serverMatch6.7b
ORvmwarevcenter_serverMatch6.7d
ORvmwarevcenter_serverMatch6.7update_3o
ORvmwarevcenter_serverMatch6.7update1
ORvmwarevcenter_serverMatch6.7update1b
ORvmwarevcenter_serverMatch6.7update2
ORvmwarevcenter_serverMatch6.7update2a
ORvmwarevcenter_serverMatch6.7update2c
ORvmwarevcenter_serverMatch6.7update3
ORvmwarevcenter_serverMatch6.7update3a
ORvmwarevcenter_serverMatch6.7update3b
ORvmwarevcenter_serverMatch6.7update3f
ORvmwarevcenter_serverMatch6.7update3g
ORvmwarevcenter_serverMatch6.7update3j
ORvmwarevcenter_serverMatch6.7update3l
ORvmwarevcenter_serverMatch6.7update3m
ORvmwarevcenter_serverMatch6.7update3n
ORvmwarevcenter_serverMatch6.7update3o
ORvmwarevcenter_serverMatch6.7update3p
ORvmwarevcenter_serverMatch6.7update3q
ORvmwarevcenter_serverMatch6.7update3r
ORvmwarevcenter_serverMatch7.0-
ORvmwarevcenter_serverMatch7.0a
ORvmwarevcenter_serverMatch7.0b
ORvmwarevcenter_serverMatch7.0c
ORvmwarevcenter_serverMatch7.0d
ORvmwarevcenter_serverMatch7.0update1
ORvmwarevcenter_serverMatch7.0update1a
ORvmwarevcenter_serverMatch7.0update1c
ORvmwarevcenter_serverMatch7.0update1d
ORvmwarevcenter_serverMatch7.0update2
ORvmwarevcenter_serverMatch7.0update2a
ORvmwarevcenter_serverMatch7.0update2b
ORvmwarevcenter_serverMatch7.0update2c
ORvmwarevcenter_serverMatch7.0update2d
ORvmwarevcenter_serverMatch7.0update3
ORvmwarevcenter_serverMatch7.0update3a
ORvmwarevcenter_serverMatch7.0update3c
ORvmwarevcenter_serverMatch7.0update3d
ORvmwarevcenter_serverMatch7.0update3e
ORvmwarevcenter_serverMatch7.0update3f
ORvmwarevcenter_serverMatch7.0update3g
ORvmwarevcenter_serverMatch7.0update3h
ORvmwarecloud_foundationMatch3.10.2
ORvmwarecloud_foundationMatch4.1.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vmware | cloud_foundation | 3.0 | cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.0.1 | cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.0.1.1 | cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.5 | cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.5.1 | cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.7 | cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.7.1 | cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.7.2 | cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.8 | cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:* |
| vmware | cloud_foundation | 3.8.1 | cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-31698
2022-12-13 16:15:19
talosblog
talosblog
talos
talos
VMware vCenter Server Content Library denial of service vulnerability
2022-12-13 00:00:00
cvelist
cvelist
CVE-2022-31698
2022-12-13 00:00:00
prion
prion
Denial of service
2022-12-13 16:15:00
ibm
ibm
nessus
nessus
vmware
vmware
malwarebytes
malwarebytes
New ESXiArgs encryption routine outmaneuvers recovery methods
2023-02-14 06:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
40.5%
Related for NVD:CVE-2022-31698