CVE-2012-5703 Denial of service in n/a
Remote attackers can crash the host daemon via invalid SOAP requests in the vSphere API, causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-5703?
CVE-2012-5703 is a medium-severity denial of service vulnerability in Vmware Esx, published on 20 Nov 2012. It can be exploited over the network, with no action from the victim.
Official description
The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request.
Weakness: CWE-20
Which versions are affected by CVE-2012-5703?
It affects 2 products.
Products include Vmware Esx, Vmware Esxi.
How do I fix CVE-2012-5703?
No fix has been published for CVE-2012-5703 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2012-5703 being exploited?
There is no known exploitation of CVE-2012-5703 in the wild and no public exploit code.
Other vulnerabilities in Vmware Esx
Sources
Also known as CVE-2012-2615, GHSA-r6hf-gvxf-pm8r.