CVE-2017-4921: High severity vmware vcenter vulnerability
Published Aug 1, 2017
·Updated
VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LDLIBRARYPATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation.
Affected Software
1 affected component
VMware vCenter Server=6.5
Remediation
Event History
Aug 1, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-4921?
CVE-2017-4921 is classified as a high severity vulnerability due to its potential to allow privilege escalation.
2
How do I fix CVE-2017-4921?
To fix CVE-2017-4921, upgrade VMware vCenter Server to version 6.5 U1 or later.
3
Who is affected by CVE-2017-4921?
CVE-2017-4921 affects VMware vCenter Server version 6.5 prior to 6.5 U1.
4
What kind of attack can be executed using CVE-2017-4921?
Exploitation of CVE-2017-4921 can lead to unauthorized privilege escalation by unprivileged host users.
5
Is CVE-2017-4921 a local or remote vulnerability?
CVE-2017-4921 is a local privilege escalation vulnerability.