CVE-2024-37086

MEDIUM Year: 2024
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-125
View all →

Vulnerability Description

VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition of the host.

Related Vulnerabilities

CVE-2018-3956

MEDIUM
CVSS:6.8(Medium)

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger...

CWE-1252018

CVE-2019-14283

MEDIUM
CVSS:6.8(Medium)

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered ...

CWE-1252019

CVE-2019-5516

MEDIUM
CVSS:6.8(Medium)

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates addr...

CWE-1252019

CVE-2019-5517

MEDIUM
CVSS:6.8(Medium)

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain mult...

CWE-1252019

CVE-2019-5518

MEDIUM
CVSS:6.8(Medium)

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10...

CWE-1252019

CVE-2021-20254

MEDIUM
CVSS:6.8(Medium)

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyon...

CWE-1252021