NetSight
high8.1

CVE-2024-22273

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability.

Impact

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.

Affected products

VendorProductAffected versions
VmwareCloud Foundation
from 4.0 before 5.1.1
VmwareWorkstation
from 17.0.0 before 17.5.1
VmwareEsxi
Versions 7.0, 8.0
VmwareFusion
from 13.0.0 before 13.5.1

Weakness classification

References