Summary
The remote ESXi is missing one or more security related Updates from VMSA-2011-0012.3.
Summary
VMware ESXi and ESX updates to third party libraries and ESX Service Console address several security issues.
Relevant releases
ESXi 5.0 without patch ESXi500-201112401-SG.
ESXi 4.1 without patch ESXi410-201110201-SG.
ESX 4.1 without patches ESX410-201110201-SG and ESX410-201110224-SG.
ESXi 4.0 without patch ESXi400-201110401-SG.
ESX 4.0 without patches ESX400-201110401-SG, ESX400-201110403-SG and ESX400-201110409-SG.
ESXi 3.5 without patch ESXe350-201203401-I-SG.
ESX 3.5 without patch ESX350-201203403-SG.
Problem Description
a. ESX third party update for Service Console kernel
This update takes the console OS kernel package to kernel-2.6.18-238.9.1 which resolves multiple security issues.
b. ESX third party update for Service Console krb5 RPMs
This patch updates the krb5-libs and krb5-workstation RPMs of the console OS to version 1.6.1-55.el5_6.1, which resolves multiple security issues.
c. ESXi and ESX update to third party component glibc
The glibc third-party library is updated to resolve multiple security issues.
d. ESX update to third party drivers mptsas, mpt2sas, and mptspi
The mptsas, mpt2sas, and mptspi drivers are updated which addresses multiple security issues in the mpt2sas driver.
Solution
Apply the missing patch(es).
See Also:
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
Severity
Classification
-
CVSS Base Score: 7.9
AV:N/AC:M/Au:S/C:C/I:C/A:N
Related Vulnerabilities
- VMSA-2013-0001 VMware vSphere security updates for the authentication service and third party libraries
- VMSA-2011-0013.2 VMware third party component updates for VMware vCenter Server, vSphere Update Manager, ESXi and ESX
- VMSA-2010-0016 VMware ESXi and ESX third party updates for Service Console and Likewise components
- VMSA-2012-0007 VMware hosted products and ESX patches address privilege escalation
- VMSA-2011-0009.3 VMware hosted product updates, ESX patches and VI Client update resolve multiple security issues