CVE-2023-20896

Name of the Vulnerable Software and Affected Versions VMware vCenter Server (affected versions not specified)

Description The issue is related to an out-of-bounds read vulnerability in the implementation of the DCERPC protocol in VMware vCenter Server. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet, leading to a denial-of-service of certain services, including vcad, vmdird, and vmafdd.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.