VMware issued security updates to fix a critical vCenter Server vulnerability that can be exploited to gain remote code execution attacks on vulnerable servers.
  • darvocet@infosec.pub
    62·
    7 months ago

    It wouldn’t be a day ending in Y if VMware didn’t release a patch that solved some major security bug.

    • henfredemars@infosec.pubEnglish
      1·
      7 months ago

      From the other side of the fence, the software is extremely complicated. I’ve done work with emulators and I’m certain it was full of security bugs because your effort is focused on getting it working at all.

      You might say it should be implemented in a memory safe systems language. I agree completely, but it costs too much to redevelop emulated hardware from scratch.

  • flambonkscious@sh.itjust.worksEnglish
    1·
    7 months ago

    Wow, that’s a doozy, though. Remote access, low complexity and unauthenticated - and it grants remote code execution? Holy shit… I wonder what context the execution happens in (I’m guessing it’s bad if it’s being talked about as an emergency change)