Vulnerabilitycritical

VMware fixed critical VM Escape bug demonstrated at Geekpwn hacking contest

Security Affairsby @securityaffairsDec 14, 2022 · 07:57 UTC (Dec 14, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-31705 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-31705 CVE-2022-31702 CVE-2022-31703

Tags: cve-2022-31705 cve-2022-31702 cve-2022-31703 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2022-31702	vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API	9.8	2%	Dec 14, 2022
CVE-2022-31703	The vRealize Log Insight contains a Directory Traversal Vulnerability	7.5	2%	Dec 14, 2022
CVE-2022-31705	VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI)	8.2	2%	Dec 14, 2022

From the original article

2 min read at securityaffairs.com

VMware fixed three flaws in multiple products, including a virtual machine escape issue exploited at the GeekPwn 2022 hacking competition. VMware addressed three vulnerabilities in multiple products, including a virtual machine escape flaw, tracked as CVE-2022-31705, that was exploited at the GeekPwn 2022 hacking competition.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.