CVEvulnerability
CVE-2017-4927
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-11-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-90
Description
VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service.
Affected configurations
• vmware vcenter server (>= 6.0 < 6.0 u3c)
• vmware vcenter server (>= 6.5 < 6.5 u1)
Related
Weakness · CWE (1)
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query weakness
References
- http://www.securityfocus.com/bid/101786 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039759 Third Party Advisory, VDB Entry
- https://www.vmware.com/security/advisories/VMSA-2017-0017.html Vendor Advisory
- http://www.securityfocus.com/bid/101786 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039759 Third Party Advisory, VDB Entry
- https://www.vmware.com/security/advisories/VMSA-2017-0017.html Vendor Advisory