CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
Published Sep 17, 2024 · updated Jun 17, 2026 · vmware cloud foundation
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Timeline
Detection, updates, and resolution for this record.
Sep 17, 2024 · Catalog
Detected
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Nov 20, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Dec 11, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Dec 11, 2024
Affected
- cpe vmware/cloud foundationversion unspecified
- cpe vmware/vcenter server7.0
- cpe vmware/vcenter server8.0
- vendor VMware vCenter Serverversion unspecified
Sources
- CISA KEVCVE-2024-38812
VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.
cisa.gov - CVE.orgCVE-2024-38812
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-38812
30-day exploitation probability 54.6%
first.org - NIST NVDCVE-2024-38812
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code executio
nvd.nist.gov