Lucene search
Grigory Dorodnov of Trend Micro Security ResearchZDI-23-1590HistoryNov 06, 2023 - 12:00 a.m.
VMware vCenter Server Appliance DCE/RPC Protocol Out-Of-Bounds Write Remote Code Execution Vulnerability
2023-11-0600:00:00
Grigory Dorodnov of Trend Micro Security Research
www.zerodayinitiative.com
34
vmware vcenter server
dce/rpc protocol
out-of-bounds write
remote code execution
vulnerability
user-supplied data
root context
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vCenter Server Appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of DCE/RPC protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Related
nvd
nvd
CVE-2023-34048
2023-10-25 18:17:27
cve
cve
CVE-2023-34048
2023-10-25 18:17:27
attackerkb
attackerkb
CVE-2023-34048
2023-10-25 00:00:00
cisa_kev
cisa_kev
VMware vCenter Server Out-of-Bounds Write Vulnerability
2024-01-22 00:00:00
cvelist
cvelist
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability
2023-10-25 04:21:42
prion
prion
Design/Logic Flaw
2023-10-25 18:17:00
vulnrichment
vulnrichment
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability
2023-10-25 04:21:42
nessus
nessus
thn
thn
Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability
2023-10-25 10:11:00
Urgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability
2023-11-15 04:18:00
Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years
2024-01-20 10:23:00
ibm
ibm
hivepro
hivepro
Vmware vCenter Flaws Leading to RCE Attacks
2023-10-27 13:16:58
malwarebytes
malwarebytes
Update vCenter Server now! VMWare fixes critical vulnerability
2023-10-25 06:44:54
vmware
vmware
rapid7blog
rapid7blog
avleonov
avleonov