CVE-2022-31681

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.0 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.vmware.com/security/advisories/VMSA-2022-0025.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:cloud_foundation::::::::
	cpe:2.3:a:vmware:cloud_foundation:4.4:::::::*
	cpe:2.3:a:vmware:cloud_foundation:4.4.1:::::::*
	cpe:2.3:a:vmware:cloud_foundation:4.4.1.1:::::::*
	cpe:2.3:o:vmware:esxi::::::::
	cpe:2.3:o:vmware:esxi:7.0:-::::::
	cpe:2.3:o:vmware:esxi:7.0:beta::::::
	cpe:2.3:o:vmware:esxi:7.0:update_1::::::
	cpe:2.3:o:vmware:esxi:7.0:update_1a::::::
	cpe:2.3:o:vmware:esxi:7.0:update_1b::::::
	cpe:2.3:o:vmware:esxi:7.0:update_1c::::::
	cpe:2.3:o:vmware:esxi:7.0:update_1d::::::
	cpe:2.3:o:vmware:esxi:7.0:update_1e::::::
	cpe:2.3:o:vmware:esxi:7.0:update_2::::::
	cpe:2.3:o:vmware:esxi:7.0:update_2a::::::
	cpe:2.3:o:vmware:esxi:7.0:update_2c::::::
	cpe:2.3:o:vmware:esxi:7.0:update_2d::::::
	cpe:2.3:o:vmware:esxi:7.0:update_2e::::::
	cpe:2.3:o:vmware:esxi:7.0:update_3c::::::
	cpe:2.3:o:vmware:esxi:7.0:update_3d::::::
	cpe:2.3:o:vmware:esxi:7.0:update_3e::::::

History

11 Oct 2022, 13:45

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-10-07 21:15

Updated : 2024-02-04 22:51

NVD link : CVE-2022-31681

Mitre link : CVE-2022-31681

CVE.ORG link : CVE-2022-31681

JSON object : View

Products Affected

vmware

cloud_foundation
esxi

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2022-31681", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.0}]}, "published": "2022-10-07T21:15:11.337", "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2022-0025.html", "tags": ["Patch", "Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host."}, {"lang": "es", "value": "VMware ESXi contiene una vulnerabilidad de deferencia de puntero null. Un actor malicioso con privilegios dentro del proceso VMX solamente, puede crear una condici\u00f3n de negaci\u00f3n de servicio en el host"}], "lastModified": "2022-10-11T13:45:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "288143A7-D64D-465F-8F81-9434C57189CB", "versionEndExcluding": "4.3.1.1", "versionStartIncluding": "4.2"}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7B0AA0D-0BE2-40C5-A432-F607EF66829C"}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C767B9C-CDAC-4651-B696-589726CDD5C2"}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.4.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E216CBB-8C99-46AA-B195-E16393354D14"}, {"criteria": "cpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D223DD19-0441-4EBD-9F51-5E9012434517", "versionEndExcluding": "7.0"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CBA6B5A-F345-41D1-8AA0-E5F274A2D8FB"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F030A666-1955-438B-8417-5C294905399F"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C8DB7F6-5765-4355-B30E-9CAC39ECA5D9"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A790D41E-B398-4233-9EC7-CF5BE2BC3161"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7619C16-5306-4C4A-88E8-E80876635F66"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "238E7AF4-722B-423D-ABB1-424286B06715"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E4DE8C7-72FB-4BEC-AD9E-378786295011"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E6DE184-35C8-4A13-91D4-4B43E9F0168C"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3E3A02D-6C1E-4DE8-B845-60F53C056F32"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12D385F0-DB2B-4802-AD0E-31441DA056B9"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C202879-9230-4E1D-BAB8-4FB7CE4BBC24"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC6DC107-5142-4155-A33B-D5BE72E9ED38"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39817170-5C45-4F8A-916D-81B7352055DD"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2F831A7-544E-4B45-BA49-7F7A0234579C"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80A0DD2E-F1CC-413B-91F9-E3986011A0A0"}, {"criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C77771B2-BC64-47A5-B6DB-9CBCC4456B67"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}