Not rated
CVE-2021-22050 ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy
Description
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelming rhttpproxy service with multiple requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESXi and VMware Cloud Foundation | Versions not published |
Other CVEs of VMware ESXi and VMware Cloud Foundation
The 5 CVEs of VMware ESXi and VMware Cloud Foundation →
CVE-2021-22043
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are…
Not rated
CVE-2021-22042
VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets
Not rated
CVE-2021-21995
OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue
Not rated
CVE-2021-21994
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability
Not rated