VMware ESXi and vCenter Server updates address multiple security vulnerabilities (CVE-2022-31696, CVE-2022-31697, CVE-2022-31698, CVE-2022-31699)

2022-12-0800:00:00

www.vmware.com

455

vmware

esxi

vcenter server

updates

security

vulnerabilities

cve-2022-31696

cve-2022-31697

cve-2022-31698

cve-2022-31699

memory corruption

information disclosure

denial of service

openslp heap overflow

AI Score

5.4

Confidence

High

EPSS

0.009

Percentile

83.5%

JSON

3a. VMware ESXi memory corruption vulnerability (CVE-2022-31696)

VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.5.

3b. VMware vCenter Server information disclosure vulnerability (CVE-2022-31697)

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.2.

3c. VMware vCenter Server content library denial of service vulnerability (CVE-2022-31698)

The vCenter Server contains a denial-of-service vulnerability in the content library service. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.8.

3d. VMware ESXi OpenSLP heap overflow vulnerability (CVE-2022-31699)

VMware ESXi contains a heap-overflow vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.2.