Vulnerability in Vmware Esx

CVE-2014-1207

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic.

EPSS: 0.013 (80.4th percentile) — read the EPSS interpretation.

Affected products

Vmware Esx — versions 4.0, 4.1
Vmware Esxi — versions 4.0, 4.1, 5.0
N/a — versions n/a

References

64995 (vdb-entry, x_refsource_BID)
vmware-esx-cve20141207-dos(90559) (vdb-entry, x_refsource_XF)
56499 (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
102196 (x_refsource_OSVDB, vdb-entry)
1029643 (vdb-entry, x_refsource_SECTRACK)