VMware vCenter Server Heap-Based Buffer Overflow Vulnerability (CVE-2024-38812)
Severity: critical · Patch status: unknown · Since 2024-11-20 · CVE-2024-38812
VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet. CISA added CVE-2024-38812 to its Known Exploited Vulnerabilities catalog on Nov 20, 2024, which means attackers are exploiting it in the wild.
What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- US federal agencies must remediate by Dec 11, 2024 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
