VMware ESXi and vCenter Server geçtiğimiz günlerde Önemli olarak bir patch yayınladı. İlgili patchleri geçmenizi tavsiye ederim.

3a. VMware ESXi memory corruption vulnerability (CVE-2022-31696)

VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.5.

 

3b. VMware vCenter Server information disclosure vulnerability (CVE-2022-31697)

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plain text. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.2.

 

3c. VMware vCenter Server content library denial of service vulnerability (CVE-2022-31698)

The vCenter Server contains a denial-of-service vulnerability in the content library service. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.8.

 

3d. VMware ESXi OpenSLP heap overflow vulnerability (CVE-2022-31699)

VMware ESXi contains a heap-overflow vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.2.