CVE-2024-38812
Description
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Summary dbcve.org
vCenter Server contains a heap-overflow vulnerability in its DCERPC protocol implementation. An unauthenticated attacker with network access can send specially crafted packets to trigger the overflow, potentially achieving remote code execution. The critical severity (CVSS 9.8) reflects the ease of network-based exploitation and complete impact on confidentiality, integrity, and availability.
Mitigation
Apply the official VMware security patch for CVE-2024-38812 to vCenter Server immediately. If patching is not immediately possible, restrict network access to vCenter Server management interfaces using network segmentation or firewall rules to limit exposure to untrusted networks.