CVE-2023-20892: VMware vCenter Server heap-overflow vulnerability

The vCenter Server is vulnerable to a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor can exploit this vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server.

CVE-2023-20893: VMware vCenter Server use-after-free vulnerability

The VMware vCenter Server has a use-after-free vulnerability due to the implementation of the DCERPC protocol. A malicious actor can exploit this issue to execute arbitrary code on the underlying operating system that hosts vCenter Server.

CVE-2023-20894: VMware vCenter Server out-of-bounds write vulnerability

The VMware vCenter Server has an out-of-bounds write vulnerability due to the implementation of the DCERPC protocol. A malicious actor can trigger an out-of-bound write by sending a specially crafted packet that leads to memory corruption.

CVE-2023-20895: VMware vCenter Server out-of-bounds read vulnerability

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor can trigger a memory corruption vulnerability which may bypass authentication.