CVE-2012-6326: Buffer Overflow

Published Feb 22, 2013

Updated

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service (disk consumption) via vectors that trigger large log entries.

Affected Software

9 affected components

VMware vCenter Server=4.1

VMware vCenter Server=4.1-update_1

VMware vCenter Server=4.1-update_2

VMware vCenter Server=5.0

VMware vCenter Server=5.0-beta

VMware vCenter Server=5.0-update_1

VMware vCenter Server=5.0-update_2_rc

VMware vCenter Server Appliance=5.0

VMware vCenter Server Appliance=5.0-update_1

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2012-0018.html

Event History

Feb 22, 2013

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-6326?

CVE-2012-6326 has a medium severity rating as it can lead to a denial of service due to disk consumption.

How do I fix CVE-2012-6326?

To fix CVE-2012-6326, you need to apply the updates provided by VMware for vCenter Server versions 4.1 after Update 3 and 5.0 after Update 2.

What versions of VMware are affected by CVE-2012-6326?

CVE-2012-6326 affects VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, as well as vCSA 5.0 before Update 2.

What is the nature of the vulnerability in CVE-2012-6326?

The nature of the vulnerability in CVE-2012-6326 is that remote attackers can generate large log entries, leading to disk consumption and potential denial of service.

Is there a workaround for CVE-2012-6326?

There is no official workaround for CVE-2012-6326, and updating to the fixed versions is recommended.