high8.8
CVE-2022-31696
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket.
Impact
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 3.0 before 3.10 from 4.0 before 4.3.11 Versions 3.10, 3.11, 4.3.11, 4.4 |
| Vmware | Esxi | Versions 6.5, 6.7, 7.0 |