VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console

               VMware Security Advisory

   socket&#40;&#41; returns -1 &#40;Cannot allocate memory&#41;

An error message similar to the following may be written to the
vmkernel logs:

   socreate&#40;type=2, proto=17&#41; failed with error 55

VMware would like to thank Jimmy Scott at inet-solutions.be for
reporting this issue to us.

The Common Vulnerabilities and Exposures Project &#40;cve.mitre.org&#41; has
assigned the name CVE-2011-1785 to this issue.

Column 4 of the following table lists the action required to
remediate the vulnerability in each release, if a solution is
available.

VMware         Product   Running  Replace with/
Product        Version   on       Apply Patch
=============  ========  =======  =================
vCenter        any       Windows  not affected

hosted *       any       any      not affected

ESXi           4.1       ESXi     ESXi410-201104401-SG
ESXi           4.0       ESXi     ESXi400-201104401-SG
ESXi           3.5       ESXi     not affected

ESX            4.1       ESX      ESX410-201104401-SG
ESX            4.0       ESX      ESX400-201104401-SG
ESX            3.5       ESX      not affected
ESX            3.0.3     ESX      not affected

Updates to the vmware-esx-likewise-openldap and
vmware-esx-likewise-krb5 packages address several security issues.

One of the vulnerabilities is specific to Likewise while the other
vulnerabilities are present in the MIT version of krb5.
An incorrect assert&#40;&#41; call in Likewise may lead to a termination
of the Likewise-open lsassd service if a username with an illegal
byte sequence is entered for user authentication when logging in to
the Active Directory domain of the ESXi/ESX host. This would lead to
a denial of service.
The MIT-krb5 vulnerabilities are detailed in MITKRB5-SA-2010-007.

The Common Vulnerabilities and Exposures project &#40;cve.mitre.org&#41; has
assigned the names CVE-2011-1786 &#40;Likewise-only issue&#41;,
CVE-2010-1324, CVE-2010-1323, CVE-2010-4020, CVE-2010-4021 to these
issues.

Column 4 of the following table lists the action required to
remediate the vulnerability in each release, if a solution is
available.

VMware         Product   Running  Replace with/
Product        Version   on       Apply Patch
=============  ========  =======  =================
vCenter        any       Windows  not affected

hosted *       any       any      not affected

ESXi           4.1       ESXi     ESXi410-201104401-SG
ESXi           4.0       ESXi     not affected
ESXi           3.5       ESXi     not affected

ESX            4.1       ESX      ESX410-201104401-SG
ESX            4.0       ESX      not affected
ESX            3.5       ESX      not affected
ESX            3.0.3     ESX      not affected

The Service Console kernel is updated to include a fix for a
security issue.

The Common Vulnerabilities and Exposures project &#40;cve.mitre.org&#41; has
assigned the name CVE-2010-2240 to this issue.

VMware         Product   Running  Replace with/

Product        Version   on       Apply Patch
=============  ========  =======  =================
vCenter        any       Windows  not affected

hosted *       any       any      not affected

ESXi           any       ESXi     not affected

ESX            4.1       ESX      ESX410-201104401-SG
ESX            4.0       ESX      see VMSA-2011-0003 section j
ESX            3.5       ESX      not applicable
ESX            3.0.3     ESX      not applicable

VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console

ESXi 4.1

ESX 4.1

ESXi 4.0

ESX 4.0

Related