{"id":5023,"date":"2024-03-06T02:00:06","date_gmt":"2024-03-06T02:00:06","guid":{"rendered":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/"},"modified":"2024-03-06T02:00:06","modified_gmt":"2024-03-06T02:00:06","slug":"vmsa-2024-0006","status":"publish","type":"post","link":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/","title":{"rendered":"VMSA-2024-0006"},"content":{"rendered":"<div>\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"responsivegrid aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"advisories-summary aem-GridColumn aem-GridColumn--default--12\">\n    <link rel=\"stylesheet\" href=\"\/etc.clientlibs\/vmware-modernize-cms\/componentlibrary\/components\/content\/advisories-summary\/clientlibs.min.css\" type=\"text\/css\">\n<section class=\"sa-detail-wrapper section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<div class=\"sa-image-block\">\n<div class=\"sa-severity\">\n<div class=\"sa-critical\">\n<p>Critical<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"sa-detail-block\">\n<div class=\"col-md-8\">\n<div class=\"sa-details\">\n<div class=\"sa-row-group\">\n             <label>Advisory ID:<\/label><br \/>\n             <span>VMSA-2024-0006<\/span>\n            <\/div>\n<div class=\"sa-row-group\">\n             <label>CVSSv3 Range:<\/label><br \/>\n             <span>7.1-9.3<\/span>\n            <\/div>\n<div class=\"sa-row-group\">\n             <label>Issue Date:<\/label><br \/>\n             <span>2024-03-05<\/span>\n            <\/div>\n<div class=\"sa-row-group\">\n             <label>Updated On:<\/label><br \/>\n             <span>2024-03-05 (Initial Advisory)<\/span>\n            <\/div>\n<div class=\"sa-row-group\">\n             <label>CVE(s):<\/label><br \/>\n             <span>CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255<\/span>\n            <\/div>\n<div class=\"sa-row-group\">\n             <label>Synopsis:<\/label><br \/>\n             <span>VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255)<\/span>\n            <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"col-md-4 sa-summary-link-section\" data-html2canvas-ignore=\"true\">\n          <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n    <link rel=\"stylesheet\" href=\"\/etc.clientlibs\/vmware-modernize-cms\/componentlibrary\/components\/content\/secadvheading\/clientlibs.min.css\" type=\"text\/css\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"1-impacted-products\" class=\"mt-30\"><b>1. Impacted Products<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<ul>\n<li>VMware ESXi<\/li>\n<li>VMware Workstation Pro \/ Player (Workstation)<\/li>\n<li>VMware Fusion Pro \/ Fusion (Fusion)<\/li>\n<li>VMware Cloud Foundation\u00a0(Cloud Foundation) <\/li>\n<\/ul><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"2-introduction\" class=\"mt-30\"><b>2. Introduction<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p> Multiple vulnerabilities in VMware ESXi, Workstation, and Fusion were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products.<\/p>\n<p>The individual vulnerabilities documented on this VMSA for ESXi have severity Important but combining these issues will result in Critical severity.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"3a-use-after-free-vulnerability-in-xhci-usb-controller-cve-2024-22252\" class=\"mt-30\"><b>3a. Use-after-free vulnerability in XHCI USB controller (CVE-2024-22252)<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Description<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.\u00a0VMware has evaluated the severity of this issue to be in the\u00a0<a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">Critical severity range<\/a>\u00a0with a maximum CVSSv3 base score of\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\">9.3<\/a>\u00a0for Workstation\/Fusion and in the\u00a0<a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">Important severity range<\/a>\u00a0with a maximum CVSSv3 base score of\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">8.4<\/a>\u00a0for ESXi.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Known Attack Vectors<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine&#8217;s VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Resolution<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><span style=\"color: rgb(51,51,51);\">To remediate CVE-2024-22252 apply the patches listed in the &#8216;Fixed Version&#8217; column of the &#8216;Response Matrix&#8217; found below.<\/span><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Workarounds<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>Workarounds for\u00a0CVE-2024-22252 have been listed in the &#8216;Workarounds&#8217; column of the &#8216;Response Matrix&#8217; below. <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Additional Documentation<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A supplemental FAQ was created for clarification. Please see: <a href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers<\/a> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Notes<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>None.<b><\/b> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Acknowledgements<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware would like to thank\u00a0Jiang YuHao, Ying XingLei &amp; Zhang ZiMing of Team Ant Lab working with the 2023 Tianfu Cup Pwn Contest and\u00a0Jiaqing Huang (@s0duku) &amp; Hao Zheng (@zhz) from TianGong Team of Legendsec at Qi&#8217;anxin Group for independently reporting this issue to us. <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"3b-use-after-free-vulnerability-in-uhci-usb-controller-cve-2024-22253\" class=\"mt-30\"><b>3b. Use-after-free vulnerability in UHCI USB controller (CVE-2024-22253)<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Description<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware ESXi, Workstation, and Fusion contain a\u00a0use-after-free vulnerability in the UHCI USB controller.\u00a0VMware has evaluated the severity of this issue to be in the\u00a0<a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">Critical severity range<\/a>\u00a0with a maximum CVSSv3 base score of\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\">9.3<\/a>\u00a0for Workstation\/Fusion and in the\u00a0<a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">Important severity range<\/a>\u00a0with a maximum CVSSv3 base score of\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">8.4<\/a>\u00a0for ESXi.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Known Attack Vectors<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine&#8217;s VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Resolution<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><span style=\"color: rgb(51,51,51);\">To remediate\u00a0CVE-2024-22253 apply the patches listed in the &#8216;Fixed Version&#8217; column of the &#8216;Response Matrix&#8217; found below.<br \/> <\/span><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Workarounds<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>Workarounds for\u00a0CVE-2024-22253 have been listed in the &#8216;Workarounds&#8217; column of the &#8216;Response Matrix&#8217; below. <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Additional Documentation<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A supplemental FAQ was created for clarification. Please see: <a href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers<\/a> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Notes<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>None.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Acknowledgements<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware would like to thank\u00a0VictorV and Wei of Team CyberAgent working with the 2023 Tianfu Cup Pwn Contest for reporting this issue to us. <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"3c-esxi-out-of-bounds-write-vulnerability-cve-2024-22254\" class=\"mt-30\"><b>3c. ESXi Out-of-bounds write vulnerability (CVE-2024-22254)<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Description<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware ESXi contains\u00a0an out-of-bounds write vulnerability. VMware has evaluated the severity of this issue to be in the\u00a0<a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">Important severity range<\/a>\u00a0with a maximum CVSSv3 base score of\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:H\/UI:N\/S:C\/C:H\/I:H\/A:N\">7.9<\/a>.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Known Attack Vectors<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A malicious actor with privileges within the VMX process may trigger an out-of-bounds write\u00a0leading to an escape of the sandbox.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Resolution<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><span style=\"color: rgb(51,51,51);\">To remediate\u00a0CVE-2024-22254 apply the patches listed in the &#8216;Fixed Version&#8217; column of the &#8216;Response Matrix&#8217; found below.<br \/> <\/span><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Workarounds<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>None.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Additional Documentation<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text   text-gray  \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\" value=\"1534342432001-Byh3doRJx\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A supplemental FAQ was created for clarification. Please see: <a href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers<\/a> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Notes<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>None.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Acknowledgements<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware would like to thank\u00a0Jiang YuHao, Ying XingLei &amp; Zhang ZiMing of Team Ant Lab working with the 2023 Tianfu Cup Pwn Contest\u00a0for reporting this issue to us. <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"3d-information-disclosure-vulnerability-in-uhci-usb-controller-cve-2024-22255\" class=\"mt-30\"><b>3d. Information disclosure vulnerability in UHCI USB controller (CVE-2024-22255)<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Description<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware ESXi, Workstation, and Fusion contain\u00a0an information disclosure vulnerability\u00a0in the UHCI USB controller. VMware has evaluated the severity of this issue to be in the\u00a0<a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">Important severity range<\/a>\u00a0with a maximum CVSSv3 base score of\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:N\/A:N\">7.1<\/a>.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Known Attack Vectors<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A malicious actor with administrative access to a virtual machine may be able to exploit this issue to\u00a0leak memory from the vmx process. \u00a0<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Resolution<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><span style=\"color: rgb(51,51,51);\">To remediate\u00a0CCVE-2024-22255 apply the patches listed in the &#8216;Fixed Version&#8217; column of the &#8216;Response Matrix&#8217; found below.<br \/> <\/span><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Workarounds<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>Workarounds for CVE-2024-22255 have been listed in the &#8216;Workarounds&#8217; column of the &#8216;Response Matrix&#8217; below.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Additional Documentation<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>A supplemental FAQ was created for clarification. Please see: <a href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers<\/a> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Notes<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>None.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Acknowledgements<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>VMware would like to thank\u00a0VictorV &amp; Wei of Team CyberAgent working with the 2023 Tianfu Cup Pwn Contest Contest and Jiaqing Huang (@s0duku) &amp; Hao Zheng (@zhz) from TianGong Team of Legendsec at Qi&#8217;anxin Group for independently reporting this issue to us. <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Response Matrix: <\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"advisories-data aem-GridColumn aem-GridColumn--default--12\">\n    <link rel=\"stylesheet\" href=\"\/etc.clientlibs\/vmware-modernize-cms\/componentlibrary\/components\/content\/advisories-data\/clientlibs.min.css\" type=\"text\/css\">\n<section class=\"response-matrix\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<div class=\"section-custom\">\n<div class=\"table-responsive\">\n<table class=\"table\">\n<tbody>\n<tr class=\"tr thead\">\n<td class=\"td\">Product<\/td>\n<td class=\"td\">Version<\/td>\n<td class=\"td\">Running On<\/td>\n<td class=\"td\">CVE Identifier<\/td>\n<td class=\"td\">CVSSv3<\/td>\n<td class=\"td\">Severity<\/td>\n<td class=\"td\">Fixed Version [1]<\/td>\n<td class=\"td\">Workarounds<\/td>\n<td class=\"td\">Additional Documentation<\/td>\n<\/tr>\n<tr class=\"tr\">\n<td class=\"td\" data-th=\"Product\">\n<div class=\"td-content\">\n                ESXi\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Version\">\n<div class=\"td-content\">\n                8.0\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Running On\">\n<div class=\"td-content\">\n                Any\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVE Identifier\">\n<div class=\"td-content\">\n                CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVSSV3\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-CVSSv30\":{\"buttonType\":\"external\",\"file_name\":\"8.4, 8.4, 7.9, 7.1\",\"analyticsLinkName\":\"8.4, 8.4, 7.9, 7.1\",\"file_extension\":\".1\",\"label\":\"8.4, 8.4, 7.9, 7.1\",\"title\":\"8.4, 8.4, 7.9, 7.1\",\"url\":\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\"}}' aria-label=\"8.4, 8.4, 7.9, 7.1\" href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">8.4, 8.4, 7.9, 7.1<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Severity\">\n<div class=\"td-content\">\n<div class=\"sa-severity-blk\">\n                 important\n                <\/div>\n<p>                <span class=\"sa-severity sa-important\"><\/span>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Fixed Version\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-fixed_version0\":{\"buttonType\":\"internal\",\"file_name\":\"ESXi80U2sb-23305545\",\"analyticsLinkName\":\"ESXi80U2sb-23305545\",\"file_extension\":\".html\",\"label\":\"ESXi80U2sb-23305545\",\"title\":\"ESXi80U2sb-23305545\",\"url\":\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u2b-release-notes\/index.html\"}}' aria-label=\"ESXi80U2sb-23305545\" href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u2b-release-notes\/index.html\">ESXi80U2sb-23305545<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Workarounds\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-workarounds0\":{\"buttonType\":\"internal\",\"file_name\":\"KB96682\",\"analyticsLinkName\":\"KB96682\",\"file_extension\":\".com\",\"label\":\"KB96682\",\"title\":\"KB96682\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/96682\"}}' aria-label=\"KB96682\" href=\"https:\/\/kb.vmware.com\/s\/article\/96682\">KB96682<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Additional Documents\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-additional_documents0\":{\"buttonType\":\"internal\",\"file_name\":\"FAQ\",\"analyticsLinkName\":\"FAQ\",\"file_extension\":\".com\",\"label\":\"FAQ\",\"title\":\"FAQ\",\"url\":\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\"}}' aria-label=\"FAQ\" href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">FAQ<\/a>\n               <\/div>\n<\/td>\n<\/tr>\n<tr class=\"tr\">\n<td class=\"td\" data-th=\"Product\">\n<div class=\"td-content\">\n                ESXi\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Version\">\n<div class=\"td-content\">\n                8.0 [2]\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Running On\">\n<div class=\"td-content\">\n                Any\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVE Identifier\">\n<div class=\"td-content\">\n                CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVSSV3\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-CVSSv31\":{\"buttonType\":\"external\",\"file_name\":\"8.4, 8.4, 7.9, 7.1\",\"analyticsLinkName\":\"8.4, 8.4, 7.9, 7.1\",\"file_extension\":\".1\",\"label\":\"8.4, 8.4, 7.9, 7.1\",\"title\":\"8.4, 8.4, 7.9, 7.1\",\"url\":\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\"}}' aria-label=\"8.4, 8.4, 7.9, 7.1\" href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">8.4, 8.4, 7.9, 7.1<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Severity\">\n<div class=\"td-content\">\n<div class=\"sa-severity-blk\">\n                 important\n                <\/div>\n<p>                <span class=\"sa-severity sa-important\"><\/span>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Fixed Version\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-fixed_version1\":{\"buttonType\":\"internal\",\"file_name\":\"ESXi80U1d-23299997\",\"analyticsLinkName\":\"ESXi80U1d-23299997\",\"file_extension\":\".html\",\"label\":\"ESXi80U1d-23299997\",\"title\":\"ESXi80U1d-23299997\",\"url\":\"https:\/\/docs-staging.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u1d-release-notes\/index.html\"}}' aria-label=\"ESXi80U1d-23299997\" href=\"https:\/\/docs-staging.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u1d-release-notes\/index.html\">ESXi80U1d-23299997<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Workarounds\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-workarounds1\":{\"buttonType\":\"internal\",\"file_name\":\"KB96682\",\"analyticsLinkName\":\"KB96682\",\"file_extension\":\".com\",\"label\":\"KB96682\",\"title\":\"KB96682\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/96682\"}}' aria-label=\"KB96682\" href=\"https:\/\/kb.vmware.com\/s\/article\/96682\">KB96682<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Additional Documents\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-additional_documents1\":{\"buttonType\":\"internal\",\"file_name\":\"FAQ\",\"analyticsLinkName\":\"FAQ\",\"file_extension\":\".com\",\"label\":\"FAQ\",\"title\":\"FAQ\",\"url\":\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\"}}' aria-label=\"FAQ\" href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">FAQ<\/a>\n               <\/div>\n<\/td>\n<\/tr>\n<tr class=\"tr\">\n<td class=\"td\" data-th=\"Product\">\n<div class=\"td-content\">\n                ESXi\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Version\">\n<div class=\"td-content\">\n                7.0\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Running On\">\n<div class=\"td-content\">\n                Any\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVE Identifier\">\n<div class=\"td-content\">\n                CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVSSV3\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-CVSSv32\":{\"buttonType\":\"external\",\"file_name\":\"8.4, 8.4, 7.9, 7.1\",\"analyticsLinkName\":\"8.4, 8.4, 7.9, 7.1\",\"file_extension\":\".1\",\"label\":\"8.4, 8.4, 7.9, 7.1\",\"title\":\"8.4, 8.4, 7.9, 7.1\",\"url\":\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\"}}' aria-label=\"8.4, 8.4, 7.9, 7.1\" href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">8.4, 8.4, 7.9, 7.1<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Severity\">\n<div class=\"td-content\">\n<div class=\"sa-severity-blk\">\n                 important\n                <\/div>\n<p>                <span class=\"sa-severity sa-important\"><\/span>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Fixed Version\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-fixed_version2\":{\"buttonType\":\"internal\",\"file_name\":\"ESXi70U3p-23307199\",\"analyticsLinkName\":\"ESXi70U3p-23307199\",\"file_extension\":\".html\",\"label\":\"ESXi70U3p-23307199\",\"title\":\"ESXi70U3p-23307199\",\"url\":\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/rn\/vsphere-esxi-70u3p-release-notes\/index.html\"}}' aria-label=\"ESXi70U3p-23307199\" href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/rn\/vsphere-esxi-70u3p-release-notes\/index.html\">ESXi70U3p-23307199<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Workarounds\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-workarounds2\":{\"buttonType\":\"internal\",\"file_name\":\"KB96682\",\"analyticsLinkName\":\"KB96682\",\"file_extension\":\".com\",\"label\":\"KB96682\",\"title\":\"KB96682\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/96682\"}}' aria-label=\"KB96682\" href=\"https:\/\/kb.vmware.com\/s\/article\/96682\">KB96682<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Additional Documents\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-additional_documents2\":{\"buttonType\":\"internal\",\"file_name\":\"FAQ\",\"analyticsLinkName\":\"FAQ\",\"file_extension\":\".com\",\"label\":\"FAQ\",\"title\":\"FAQ\",\"url\":\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\"}}' aria-label=\"FAQ\" href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">FAQ<\/a>\n               <\/div>\n<\/td>\n<\/tr>\n<tr class=\"tr\">\n<td class=\"td\" data-th=\"Product\">\n<div class=\"td-content\">\n                Workstation\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Version\">\n<div class=\"td-content\">\n                17.x\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Running On\">\n<div class=\"td-content\">\n                Any\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVE Identifier\">\n<div class=\"td-content\">\n                CVE-2024-22252, CVE-2024-22253, CVE-2024-22255\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVSSV3\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-CVSSv33\":{\"buttonType\":\"external\",\"file_name\":\"9.3, 9.3,  7.1\",\"analyticsLinkName\":\"9.3, 9.3,  7.1\",\"file_extension\":\".1\",\"label\":\"9.3, 9.3,  7.1\",\"title\":\"9.3, 9.3,  7.1\",\"url\":\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\"}}' aria-label=\"9.3, 9.3,  7.1\" href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\">9.3, 9.3, 7.1<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Severity\">\n<div class=\"td-content\">\n<div class=\"sa-severity-blk\">\n                 critical\n                <\/div>\n<p>                <span class=\"sa-severity sa-critical\"><\/span>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Fixed Version\">\n<div class=\"td-content\">\n                17.5.1\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Workarounds\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-workarounds3\":{\"buttonType\":\"internal\",\"file_name\":\"KB96682\",\"analyticsLinkName\":\"KB96682\",\"file_extension\":\".com\",\"label\":\"KB96682\",\"title\":\"KB96682\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/96682\"}}' aria-label=\"KB96682\" href=\"https:\/\/kb.vmware.com\/s\/article\/96682\">KB96682<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Additional Documents\">\n<div class=\"td-content\">\n                None.\n               <\/div>\n<\/td>\n<\/tr>\n<tr class=\"tr\">\n<td class=\"td\" data-th=\"Product\">\n<div class=\"td-content\">\n                Fusion\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Version\">\n<div class=\"td-content\">\n                13.x\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Running On\">\n<div class=\"td-content\">\n                MacOS\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVE Identifier\">\n<div class=\"td-content\">\n                CVE-2024-22252, CVE-2024-22253, CVE-2024-22255\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVSSV3\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-CVSSv34\":{\"buttonType\":\"external\",\"file_name\":\"9.3, 9.3,  7.1\",\"analyticsLinkName\":\"9.3, 9.3,  7.1\",\"file_extension\":\".1\",\"label\":\"9.3, 9.3,  7.1\",\"title\":\"9.3, 9.3,  7.1\",\"url\":\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\"}}' aria-label=\"9.3, 9.3,  7.1\" href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\">9.3, 9.3, 7.1<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Severity\">\n<div class=\"td-content\">\n<div class=\"sa-severity-blk\">\n                 critical\n                <\/div>\n<p>                <span class=\"sa-severity sa-critical\"><\/span>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Fixed Version\">\n<div class=\"td-content\">\n                13.5.1\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Workarounds\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1077642902-workarounds4\":{\"buttonType\":\"internal\",\"file_name\":\"KB96682\",\"analyticsLinkName\":\"KB96682\",\"file_extension\":\".com\",\"label\":\"KB96682\",\"title\":\"KB96682\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/96682\"}}' aria-label=\"KB96682\" href=\"https:\/\/kb.vmware.com\/s\/article\/96682\">KB96682<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Additional Documents\">\n<div class=\"td-content\">\n                None\n               <\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><b>[1]<\/b> While Broadcom does not mention end-of-life products in the Security Advisories, due to the critical severity of these vulnerabilities Broadcom has made a patch available to customers with extended support for ESXi 6.7 (<a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/6.7\/rn\/esxi670-202403001.html\">6.7U3u<\/a>), 6.5 (<a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/6.5\/rn\/esxi650-202403001.html\">6.5U3v)<\/a> and <a href=\"https:\/\/kb.vmware.com\/s\/article\/96717\">VCF 3.x<\/a>.<\/p>\n<p><b>[2] <\/b>Because of the severity of these issues,\u00a0Broadcom has made additional patches available for ESXi 8.0 U1. If you do not plan to update your environment to ESXi 8.0 Update 2b (build # 23305546), use 8.0 Update 1d to update your ESXi hosts of version 8.0 Update 1c (build # 22088125) and earlier for these security fixes. The supported update path from 8.0 Update 1d is to ESXi 8.0 Update 2b or later.\u00a0For more information, see the <a href=\"https:\/\/interopmatrix.vmware.com\/Upgrade?productId=1&amp;isHidePatch=false&amp;isHideLegacyReleases=true\">Product Interoperability Matrix<\/a>.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<p class=\"mt-15\"><b>Impacted Product Suites that Deploy Response Matrix Components:<\/b><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"advisories-data aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"response-matrix\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<div class=\"section-custom\">\n<div class=\"table-responsive\">\n<table class=\"table\">\n<tbody>\n<tr class=\"tr thead\">\n<td class=\"td\">Product<\/td>\n<td class=\"td\">Version<\/td>\n<td class=\"td\">Running On<\/td>\n<td class=\"td\">CVE Identifier<\/td>\n<td class=\"td\">CVSSv3<\/td>\n<td class=\"td\">Severity<\/td>\n<td class=\"td\">Fixed Version<\/td>\n<td class=\"td\">Workarounds<\/td>\n<td class=\"td\">Additional Documentation<\/td>\n<\/tr>\n<tr class=\"tr\">\n<td class=\"td\" data-th=\"Product\">\n<div class=\"td-content\">\n                Cloud Foundation (ESXi)\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Version\">\n<div class=\"td-content\">\n                5.x\/4.x\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Running On\">\n<div class=\"td-content\">\n                Any\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVE Identifier\">\n<div class=\"td-content\">\n                CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"CVSSV3\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1076121634-CVSSv30\":{\"buttonType\":\"external\",\"file_name\":\"8.4, 8.4, 7.9, 7.1\",\"analyticsLinkName\":\"8.4, 8.4, 7.9, 7.1\",\"file_extension\":\".1\",\"label\":\"8.4, 8.4, 7.9, 7.1\",\"title\":\"8.4, 8.4, 7.9, 7.1\",\"url\":\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\"}}' aria-label=\"8.4, 8.4, 7.9, 7.1\" href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">8.4, 8.4, 7.9, 7.1<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Severity\">\n<div class=\"td-content\">\n<div class=\"sa-severity-blk\">\n                 important\n                <\/div>\n<p>                <span class=\"sa-severity sa-important\"><\/span>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Fixed Version\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1076121634-fixed_version0\":{\"buttonType\":\"internal\",\"file_name\":\"KB88287\",\"analyticsLinkName\":\"KB88287\",\"file_extension\":\".com\",\"label\":\"KB88287\",\"title\":\"KB88287\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/88287\"}}' aria-label=\"KB88287\" href=\"https:\/\/kb.vmware.com\/s\/article\/88287\">KB88287<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Workarounds\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1076121634-workarounds0\":{\"buttonType\":\"internal\",\"file_name\":\"KB96682\",\"analyticsLinkName\":\"KB96682\",\"file_extension\":\".com\",\"label\":\"KB96682\",\"title\":\"KB96682\",\"url\":\"https:\/\/kb.vmware.com\/s\/article\/96682\"}}' aria-label=\"KB96682\" href=\"https:\/\/kb.vmware.com\/s\/article\/96682\">KB96682<\/a>\n               <\/div>\n<\/td>\n<td class=\"td\" data-th=\"Additional Documents\">\n<div class=\"td-content\">\n                <!-- Datalayer Implementation --><br \/>\n                <a data-cmp-data-layer='{\"advisories-data-1076121634-additional_documents0\":{\"buttonType\":\"internal\",\"file_name\":\"FAQ\",\"analyticsLinkName\":\"FAQ\",\"file_extension\":\".com\",\"label\":\"FAQ\",\"title\":\"FAQ\",\"url\":\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\"}}' aria-label=\"FAQ\" href=\"https:\/\/core.vmware.com\/resource\/vmsa-2024-0006-questions-answers\">FAQ<\/a>\n               <\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"4-references\" class=\"mt-30\"><b>4. References<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><b><b>VMware ESXi 8.0 ESXi-8.0U2sb-23305545<br \/> <\/b><\/b><a href=\"https:\/\/my.vmware.com\/group\/vmware\/patch\">https:\/\/my.vmware.com\/group\/vmware\/patch<\/a><br \/> <a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u2b-release-notes\/index.html\">https:\/\/docs.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u2b-release-notes\/index.html<\/a> <\/p>\n<p><b><b>VMware ESXi 8.0\u00a0ESXi80U1d-23299997<br \/> <\/b><\/b><a href=\"https:\/\/my.vmware.com\/group\/vmware\/patch\">https:\/\/my.vmware.com\/group\/vmware\/patch<\/a><br \/> <a href=\"https:\/\/docs-staging.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u1d-release-notes\/index.html\">https:\/\/docs-staging.vmware.com\/en\/VMware-vSphere\/8.0\/rn\/vsphere-esxi-80u1d-release-notes\/index.html<\/a><\/p>\n<p><b><b>VMware ESXi 7.0\u00a0ESXi70U3p-23307199<br \/> <\/b><\/b><a href=\"https:\/\/my.vmware.com\/group\/vmware\/patch\">https:\/\/my.vmware.com\/group\/vmware\/patch<\/a><br \/> <a href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/rn\/vsphere-esxi-70u3p-release-notes\/index.html\">https:\/\/docs.vmware.com\/en\/VMware-vSphere\/7.0\/rn\/vsphere-esxi-70u3p-release-notes\/index.html<\/a><\/p>\n<p><b>Workstation Pro 17.5.1<\/b><br \/> Downloads and Documentation<br \/> <a href=\"https:\/\/customerconnect.vmware.com\/downloads\/info\/slug\/desktop_end_user_computing\/vmware_workstation_pro\/17_0\">https:\/\/customerconnect.vmware.com\/downloads\/info\/slug\/desktop_end_user_computing\/vmware_workstation_pro\/17_0<\/a><br \/> <a href=\"https:\/\/docs.vmware.com\/en\/VMware-Workstation-Pro\/17.5.1\/rn\/vmware-workstation-1751-pro-release-notes\/index.html\">https:\/\/docs.vmware.com\/en\/VMware-Workstation-Pro\/17.5.1\/rn\/vmware-workstation-1751-pro-release-notes\/index.html<\/a><\/p>\n<p><b>Fusion 13.5.1<\/b><br \/> Downloads and Documentation<br \/> <a href=\"https:\/\/customerconnect.vmware.com\/en\/downloads\/info\/slug\/desktop_end_user_computing\/vmware_fusion\/13_0\">https:\/\/customerconnect.vmware.com\/en\/downloads\/info\/slug\/desktop_end_user_computing\/vmware_fusion\/13_0<\/a><br \/> <a href=\"https:\/\/docs.vmware.com\/en\/VMware-Fusion\/13.5.1\/rn\/vmware-fusion-1351-release-notes\/index.html\">https:\/\/docs.vmware.com\/en\/VMware-Fusion\/13.5.1\/rn\/vmware-fusion-1351-release-notes\/index.html<\/a><\/p>\n<p><b>VMware Cloud Foundation 5.x\/4.x<br \/> <\/b>Downloads and Documentation:<b><br \/> <\/b><a href=\"https:\/\/kb.vmware.com\/s\/article\/88287\">https:\/\/kb.vmware.com\/s\/article\/88287<\/a><\/p>\n<p><b>Mitre CVE Dictionary Links:<br \/> <\/b><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22252\">https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22252<\/a>\u00a0<br \/> <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22253\">https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22253<\/a>\u00a0<br \/> <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22254\">https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22254<\/a>\u00a0<br \/> <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22255\">https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024-22255<\/a><b><br \/> <\/b><\/p>\n<p><b>FIRST CVSSv3 Calculator:<br \/> CVE-2024-22252:<br \/> <\/b>ESXi:<b>\u00a0<\/b><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H<\/a><b><br \/> <\/b>Workstation\/Fusion:\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\">https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H<\/a><\/p>\n<p> <b>CVE-2024-22253:\u00a0<br \/> <\/b>ESXi:\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H\">https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H<\/a><br \/> Workstation\/Fusion:\u00a0<a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H\">https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H<\/a><\/p>\n<p> <b>CVE-2024-22254:\u00a0<\/b><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:H\/UI:N\/S:C\/C:H\/I:H\/A:N\">https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:H\/UI:N\/S:C\/C:H\/I:H\/A:N<\/a><br \/> <b><br \/> CVE-2024-22255:\u00a0<\/b><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:N\/A:N\">https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:N\/A:N<\/a><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"5-change-log\" class=\"mt-30\"><b>5. Change Log<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p><b>2024-03-05 VMSA-2024-0006<br \/> <\/b>Initial security advisory. <\/p>\n<p>\u00a0<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"secadvheading aem-GridColumn aem-GridColumn--default--12\">\n<section class=\"section-custom\">\n<div class=\"container\">\n<div class=\"content\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n<h5 id=\"6-contact\" class=\"mt-30\"><b>6. Contact<\/b><\/h5>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/section><\/div>\n<div class=\"text aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"cmp-text     \">\n<div class=\"nested-filtered-table active\">\n<div class=\"container\">\n<div class=\"row\">\n<div class=\"col-md-12\">\n         <input type=\"hidden\" class=\"ExpandLabel\"><br \/>\n         <input type=\"hidden\" class=\"CollapseLabel\"><br \/>\n         <input type=\"hidden\" class=\"BrightcoveAccountID\"> <\/p>\n<div class=\"container text-container\" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<div class=\"row\">\n<div class=\"col-md-12 no-padd \" data-aos=\"fade-up\" data-aos-delay=\"500\">\n<p>E-mail: <a href=\"mailto:security@vmware.com\">security@vmware.com<\/a><\/p>\n<p>PGP key at:<br \/> <a href=\"https:\/\/kb.vmware.com\/kb\/1055\">https:\/\/kb.vmware.com\/kb\/1055\u00a0<\/a><\/p>\n<p>VMware Security Advisories<br \/> <a href=\"https:\/\/www.vmware.com\/security\/advisories\">https:\/\/www.vmware.com\/security\/advisories\u00a0<\/a><\/p>\n<p>VMware Security Response Policy<br \/> <a href=\"https:\/\/www.vmware.com\/support\/policies\/security_response.html\">https:\/\/www.vmware.com\/support\/policies\/security_response.html\u00a0<\/a><\/p>\n<p>VMware Lifecycle Support Phases<br \/> <a href=\"https:\/\/www.vmware.com\/support\/policies\/lifecycle.html\">https:\/\/www.vmware.com\/support\/policies\/lifecycle.html\u00a0<\/a><\/p>\n<p>VMware Security &amp; Compliance Blog\u00a0\u00a0<br \/> <a href=\"https:\/\/blogs.vmware.com\/security\">https:\/\/blogs.vmware.com\/security\u00a0<\/a><\/p>\n<p>Twitter<br \/> <a href=\"https:\/\/twitter.com\/VMwareSRC\">https:\/\/twitter.com\/VMwareSRC<\/a><\/p>\n<p>\u00a0<\/p>\n<p>Copyright 2024 Broadcom. All rights reserved.<br \/> \u00a0 <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/www.vmware.com\/security\/advisories\/VMSA-2024-0006.html\">Read full article (vmware.com)<\/a><\/p>\n<p>All content and images belong to their respected owners, this article is curated for informational purposes only.<\/p>\n","protected":false},"excerpt":{"rendered":"Critical Advisory ID: VMSA-2024-0006 CVSSv3 Range: 7.1-9.3 Issue Date: 2024-03-05 Updated On: 2024-03-05 (Initial Advisory) CVE(s): CVE-2024-22252, CVE-2024-22253,&hellip;\n","protected":false},"author":2,"featured_media":2586,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"csco_singular_sidebar":"","csco_page_header_type":"","csco_appearance_grid":"","csco_page_load_nextpost":"","csco_post_video_location":[],"csco_post_video_location_hash":"","csco_post_video_url":"","csco_post_video_bg_start_time":0,"csco_post_video_bg_end_time":0,"footnotes":""},"categories":[16],"tags":[390,393,2449],"coauthors":[48],"class_list":["post-5023","post","type-post","status-publish","format-standard","has-post-thumbnail","category-vmware-virtualisation","tag-advisory","tag-critical","tag-vmsa20240006","cs-entry","cs-video-wrap"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>VMSA-2024-0006 | Sebae Networks<\/title>\n<meta name=\"description\" content=\"View VMSA-2024-0006 for free, here at Sebae. Discover more great posts on our website.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VMSA-2024-0006 | Sebae Networks\" \/>\n<meta property=\"og:description\" content=\"View VMSA-2024-0006 for free, here at Sebae. Discover more great posts on our website.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/\" \/>\n<meta property=\"og:site_name\" content=\"Sebae Networks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sebaenetworks\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-06T02:00:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/12\/sebae-logo-card.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"James Dean\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sebaenetworks\" \/>\n<meta name=\"twitter:site\" content=\"@sebaenetworks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Dean\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"VMSA-2024-0006 | Sebae Networks","description":"View VMSA-2024-0006 for free, here at Sebae. Discover more great posts on our website.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/","og_locale":"en_GB","og_type":"article","og_title":"VMSA-2024-0006 | Sebae Networks","og_description":"View VMSA-2024-0006 for free, here at Sebae. Discover more great posts on our website.","og_url":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/","og_site_name":"Sebae Networks","article_publisher":"https:\/\/www.facebook.com\/sebaenetworks","article_published_time":"2024-03-06T02:00:06+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/12\/sebae-logo-card.jpg","type":"image\/jpeg"}],"author":"James Dean","twitter_card":"summary_large_image","twitter_creator":"@sebaenetworks","twitter_site":"@sebaenetworks","twitter_misc":{"Written by":"James Dean","Estimated reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#article","isPartOf":{"@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/"},"author":{"name":"James Dean","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/person\/6d07e05e3d3e4483117c4e2c3315a89f"},"headline":"VMSA-2024-0006","datePublished":"2024-03-06T02:00:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/"},"wordCount":1547,"commentCount":0,"publisher":{"@id":"https:\/\/www.sebae.net\/blog\/#organization"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/vmware-logo-header.png","keywords":["Advisory","Critical","VMSA20240006"],"articleSection":["VMware Virtualisation"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/","url":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/","name":"VMSA-2024-0006 | Sebae Networks","isPartOf":{"@id":"https:\/\/www.sebae.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#primaryimage"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#primaryimage"},"thumbnailUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/vmware-logo-header.png","datePublished":"2024-03-06T02:00:06+00:00","description":"View VMSA-2024-0006 for free, here at Sebae. Discover more great posts on our website.","breadcrumb":{"@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#primaryimage","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/vmware-logo-header.png","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/11\/vmware-logo-header.png","width":1920,"height":1080,"caption":"vmware logo header"},{"@type":"BreadcrumbList","@id":"https:\/\/www.sebae.net\/blog\/vmsa-2024-0006\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.sebae.net\/blog\/"},{"@type":"ListItem","position":2,"name":"VMSA-2024-0006"}]},{"@type":"WebSite","@id":"https:\/\/www.sebae.net\/blog\/#website","url":"https:\/\/www.sebae.net\/blog\/","name":"Sebae Networks","description":"Tech Tips, News, Tutorials &amp; Advice","publisher":{"@id":"https:\/\/www.sebae.net\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sebae.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.sebae.net\/blog\/#organization","name":"Sebae","url":"https:\/\/www.sebae.net\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/06\/sebae-logo-icon.png","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2023\/06\/sebae-logo-icon.png","width":512,"height":512,"caption":"Sebae"},"image":{"@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/sebaenetworks","https:\/\/x.com\/sebaenetworks"]},{"@type":"Person","@id":"https:\/\/www.sebae.net\/blog\/#\/schema\/person\/6d07e05e3d3e4483117c4e2c3315a89f","name":"James Dean","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg72371c27260698ee55141397050ef40a","url":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg","contentUrl":"https:\/\/www.sebae.net\/blog\/wp-content\/uploads\/2021\/10\/avatar_user_2_1634496168-96x96.jpg","caption":"James Dean"},"sameAs":["https:\/\/www.sebae.net"],"url":"https:\/\/www.sebae.net\/blog\/author\/jdean\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/5023","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/comments?post=5023"}],"version-history":[{"count":0,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/posts\/5023\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/media\/2586"}],"wp:attachment":[{"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/media?parent=5023"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/categories?post=5023"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/tags?post=5023"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sebae.net\/blog\/wp-json\/wp\/v2\/coauthors?post=5023"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}