CVE-2024-9143 Openssl , CVE-2024-12133 Libtasn1 , CVE-2024-8176 Expat Vulnerabilities in vCenter.

Products

• VMware vCenter Server

Issue/Introduction

CVE-2024-9143 Openssl , CVE-2024-12133 Libtasn1 ,  CVE-2024-8176 Expat are photon OS Vulnerabilities that affect vCenter server.

Openssl

Package name     : Openssl 

Affected version   : 3.0.15 

 

Libtasn1 

Package name    : Libtasn1 

Affected version  : 4.14

 

Expat 

Package name    : Expat 

Affected version  :  2.2.9-12

 

Environment

vCenter 7.x

vCenter 8.x

Resolution

All CVE's mentioned are resolved in 8.0U3g.

Openssl

Package name     : Openssl 

Fixed version       : 3.0.16-1.ph4

 

Libtasn1 

Package name    : Libtasn1 

Fixed version      : 4.14-3.ph4

 

Expat 

Package name    : Expat 

Fixed version      :  2.7.1-1.ph4

 

VMware vCenter Server Photon OS Security Patches

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/vcenter-server-appliance-photonos-security-patches.html