Vulnerability Details : CVE-2021-22045
VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.
Vulnerability category: Memory CorruptionExecute code
Products affected by CVE-2021-22045
- cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201908001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201910001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-20191004001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201903001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201904001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201903001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201906002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201905001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201905001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201911001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201911401:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201911402:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912101:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912102:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912103:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912104:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912301:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912401:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912402:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912403:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-201912404:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202005001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202006001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202007001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202010001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202011001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202011002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202102001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908101:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908102:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908103:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908104:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908201:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908202:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908203:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908204:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908205:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908206:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908207:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908208:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908209:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908210:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908211:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908212:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908213:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908214:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908215:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908216:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908217:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908218:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908219:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908220:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201908221:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912101:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912102:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912401:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912402:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912403:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912404:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201912405:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004301:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004401:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004402:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004403:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004404:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004405:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004406:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004407:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202004408:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202006001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202008001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202010001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202011001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202011002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202102001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-201911001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202102002:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202102003:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.5:650-202107401:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202103001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:6.7:670-202111001:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*
- cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*
- cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
Threat overview for CVE-2021-22045
Top countries where our scanners detected CVE-2021-22045
Top open port discovered on systems with this issue
443
IPs affected by CVE-2021-22045 42,524
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2021-22045!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2021-22045
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 37 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-22045
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.9
|
MEDIUM | AV:L/AC:M/Au:N/C:C/I:C/A:C |
3.4
|
10.0
|
NIST | |
7.8
|
HIGH | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
1.1
|
6.0
|
NIST |
CWE ids for CVE-2021-22045
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-22045
-
https://www.zerodayinitiative.com/advisories/ZDI-22-003/
ZDI-22-003 | Zero Day InitiativeThird Party Advisory;VDB Entry
-
https://www.vmware.com/security/advisories/VMSA-2022-0001.html
VMSA-2022-0001Vendor Advisory
-
http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.html
VMware Security Advisory 2022-0001 ≈ Packet StormThird Party Advisory;VDB Entry
Jump to