VmWare vCenter Server Vulnerability Repair Solution

There are 6 major vulnerabilities this time

vCenter Server Heap Overflow Vulnerability (CVE-2023-20892)
vCenter Server Use-After-Free Vulnerability (CVE-2023-20893)
vCenter Server Out-of-Bounds Write Vulnerability (CVE-2023-20894)
vCenter Server Out-of-Bounds Read Vulnerability (CVE-2023-20895) )
vCenter Server Out-of-Bounds Read Vulnerability (CVE-2023-20896)


Affected versions of the above five vulnerabilities
VMware vCenter Server 8.0 series < 8.0 U1b
VMware vCenter Server 7.0 series < 7.0 U3m
VMware Cloud Foundation (vCenter Server) 5.x series < 8.0 U1b
VMware Cloud Foundation (vCenter Server) 4.x series < 7.0 U3m

VMware vCenter Server 8.0 U1b => https://docs.vmware.com/en/VMware-vSphere/8.0/rn/vsphere-vcenter-server-80u1b-release-notes/index.html
VMware vCenter Server 7.0 U3m=>https://docs.vmware.com/en/VMware-vSphere/7.0/rn/vsphere-vcenter-server-70u3m-release-notes/index.html

An Information Disclosure Vulnerability in Tomcat (CVE-2023-34981)
Apache Tomcat Version: 11.0.0-M5
Apache Tomcat Version: 10.1.8
Apache Tomcat Version: 9.0.74
Apache Tomcat Version: 8.5.88

Fix Version
Apache Tomcat Version: >=11.0.0-M6
Apache Tomcat Version: >=10.1.9
Apache Tomcat Version: >=9.0.75
Apache Tomcat Version: >=8.5.89

Guess you like

Origin blog.csdn.net/qq_30596783/article/details/131688412