CVE-2012-1516: Buffer Overflow
First published: Fri May 04 2012(Updated: )
The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving data pointers.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware ESXi | =3.5 | |
| VMware ESXi | =3.5-update1 | |
| VMware ESXi | =3.5-update2 | |
| VMware ESXi | =3.5-update3 | |
| VMware ESXi | =4.0 | |
| VMware ESXi | =4.1 | |
| VMware ESXi | =3.5 | |
| VMware ESXi | =3.5-1 | |
| VMware ESXi | =4.0 | |
| VMware ESXi | =4.0-1 | |
| VMware ESXi | =4.0-2 | |
| VMware ESXi | =4.0-3 | |
| VMware ESXi | =4.0-4 | |
| VMware ESXi | =4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-1516?
CVE-2012-1516 is considered a critical vulnerability due to its potential to allow denial of service and arbitrary code execution.
How do I fix CVE-2012-1516?
To fix CVE-2012-1516, update your VMware ESXi or ESX installations to the latest patched versions provided by VMware.
What versions are affected by CVE-2012-1516?
CVE-2012-1516 affects VMware ESXi versions 3.5 through 4.1 and ESX versions 3.5 through 4.1.
What impact does CVE-2012-1516 have on systems?
CVE-2012-1516 can cause a denial of service resulting in memory overwrite and process crashes, and it may allow for execution of arbitrary code on the host OS.
Who is at risk from CVE-2012-1516?
Organizations using the affected versions of VMware ESXi and ESX are at risk from CVE-2012-1516 and should take immediate action to mitigate it.
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/event
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/softwarecombine
- agent/tags
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware esxi
- version/vmware esxi/3.5
- version/vmware esxi/3.5-update1
- version/vmware esxi/3.5-update2
- version/vmware esxi/3.5-update3
- version/vmware esxi/4.0
- version/vmware esxi/4.1
- version/vmware esxi/3.5-1
- version/vmware esxi/4.0-1
- version/vmware esxi/4.0-2
- version/vmware esxi/4.0-3
- version/vmware esxi/4.0-4