CVE-2023-20894 (published 2023-06-22T11:54:04.383Z)
The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption.
Affected products: Vendor: VMware
Product: VMware vCenter Server (vCenter Server)
Versions: 8.0, 7.0