漏洞描述
此信息泄露漏洞源于在 vSockets 中使用未初始化的内存。攻击者必须拥有虚拟机的本地管理权限才能利用此漏洞。成功利用此漏洞可能导致与 vSockets 通信的进程发生内存泄漏。
VMware ESXi、Workstation、Fusion vSockets 信息泄露漏洞
PoC代码
暂无相关漏洞推荐
- Adobe ColdFusion /hax/..CFIDE/wizards/common/utils.cfc 权限绕过漏洞（CVE-2023-38205）
- CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
- POC CVE-2010-2861: Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI
- POC CVE-2017-3506: Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution
- POC CVE-2018-15961: Adobe ColdFusion - Unrestricted File Upload Remote Code Execution
- POC CVE-2018-2791: Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting
- POC CVE-2018-3238: Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 - Cross-Site Scripting
- POC CVE-2018-8727: Mirasys DVMS Workstation <=5.12.6 - Local File Inclusion
- POC CVE-2019-2578: Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - Broken Access Control
- POC CVE-2019-2579: Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - SQL Injection
- POC CVE-2020-14864: Oracle Fusion - Directory Traversal/Local File Inclusion
- POC CVE-2020-14883: Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution
- POC CVE-2020-24949: PHP-Fusion 9.03.50 - Remote Code Execution