CVE-2017-4927

At a glance

Severity: Not available
EPSS: EPSS 2.32 % · percentile 83 (2026-10-27)
State: PUBLISHED
Published: 2017-11-17
Updated: 2024-09-17
Assigner: vmware
NVD status: Modified

Description

VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service.

Scores

Version	Score	Vector	Scored by
CVSS 3.0	HIGH 7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P	NVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

CWE-90

European references

ENISA EUVD · EUVD-2017-14044
GCVE · GCVE-0-2017-4927

CERT-FR advisories

CERTFR-2017-AVI-404 — Multiples vulnérabilités dans VMware vCenter Server · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:* ≥ 6.0 < 6.0_u3c
cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:* ≥ 6.5 < 6.5_u1

Affected products

Product	Versions
VMware · vCenter Server	affected 6.5 prior to 6.5 U1 ; affected 6.0 prior to 6.0 U3c

References

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD