CVE-2023-20892 (published 2023-06-22T11:47:19.390Z)
The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit heap-overflow vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server.
Affected products: Vendor: VMware
Product: VMware vCenter Server (vCenter Server)
Versions: 8.0, 7.0