VMware ESXi Denial-of-Service Vulnerability in Guest Operations

A denial-of-service vulnerability has been identified in VMware ESXi, specifically when performing guest operations. This issue allows a malicious actor with guest operation privileges on a virtual machine (VM) to disrupt the functionality of guest VMs that have VMware Tools running and guest operations enabled. The vulnerability arises from the way guest operations are handled, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability creates a denial-of-service condition for guest VMs, causing them to become unresponsive or unavailable.

Remediation

To address this vulnerability, users should apply the updates available in VMware ESXi 8.0 (ESXi80U3se-24659227) or VMware ESXi 7.0 (ESXi70U3sv-24723868).