Medium severity6.5NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026
CVE-2022-31681
CVE-2022-31681
Description
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*range: >=4.2,<4.3.1.1
- cpe:2.3:a:vmware:cloud_foundation:4.4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:cloud_foundation:4.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:cloud_foundation:4.4:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*range: <7.0
- cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- www.vmware.com/security/advisories/VMSA-2022-0025.htmlnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.