VYPR
← All advisories
High severity8.1NVD Advisory· Published May 21, 2024· Updated Jun 17, 2026

CVE-2024-22273

CVE-2024-22273

Description

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

41
  • VMware/Cloud Foundation
    cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
    Range: >=4.0,<5.1.1
  • VMware/Workstation2 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=17.0.0,<17.5.1
    • (no CPE)
  • VMware/Esxi36 versions
    cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*+ 35 more
    • cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3p:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*
    • (no CPE)
  • VMware/Fusion2 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=13.0.0,<13.5.1
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.