Ref# ADV2024_209 | Date: Jun 21st 2024

---

VMware has published a security advisory highlighting vulnerabilities in the following products on June 18, 2024. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• VMware vCenter Server – versions 8.0 prior to 8.0 U2d, versions 8.0 prior to 8.0 U1e and versions 7.0 prior to 7.0 U3r 

• VMware Cloud Foundation (vCenter Server) – versions 4.x and 5.x 

For more information on these updates, you can follow this URL: 

• VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081) 

The Guyana National CIRT recommends that users and administrators review these updates and apply it where necessary. 

PDF Download: VMware Security Advisory

References 

• VMware Security Advisories. (June 18, 2024). Retrieved from VMware.
  https://support.broadcom.com/web/ecx/security-advisory?segment=VC 

• VMware Security Advisory. (June 19, 2024). Retrieved from Canadian Centre for Cyber Security.
  https://www.cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av24-345