Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

VMSA-2011-0012.3 VMware ESXi and ESX updates to third party libraries and ESX Service Console

Information

Severity

Severity

High

Family

Family

VMware Local Security Checks

CVSSv2 Base

CVSSv2 Base

7.9

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:M/Au:S/C:C/I:C/A:N

Solution Type

Solution Type

Vendor Patch

Created

Created

12 years ago

Modified

Modified

5 years ago

Summary

The remote ESXi is missing one or more security related Updates from VMSA-2011-0012.3.

Insight

Insight

VMware ESXi and ESX updates to third party libraries and ESX Service Console address several security issues. a. ESX third party update for Service Console kernel This update takes the console OS kernel package to kernel-2.6.18-238.9.1 which resolves multiple security issues. b. ESX third party update for Service Console krb5 RPMs This patch updates the krb5-libs and krb5-workstation RPMs of the console OS to version 1.6.1-55.el5_6.1, which resolves multiple security issues. c. ESXi and ESX update to third party component glibc The glibc third-party library is updated to resolve multiple security issues. d. ESX update to third party drivers mptsas, mpt2sas, and mptspi The mptsas, mpt2sas, and mptspi drivers are updated which addresses multiple security issues in the mpt2sas driver.

Affected Software

Affected Software

ESXi 5.0 without patch ESXi500-201112401-SG. ESXi 4.1 without patch ESXi410-201110201-SG. ESX 4.1 without patches ESX410-201110201-SG and ESX410-201110224-SG. ESXi 4.0 without patch ESXi400-201110401-SG. ESX 4.0 without patches ESX400-201110401-SG, ESX400-201110403-SG and ESX400-201110409-SG. ESXi 3.5 without patch ESXe350-201203401-I-SG. ESX 3.5 without patch ESX350-201203403-SG.

Solution

Solution

Apply the missing patch(es).