CVE-2008-4914

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-03 · updated 2026-06-16

Description

Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host crash) via a snapshot with a malformed VMDK delta disk.

Affected products

VMware ESX: 3.5
VMware ESXi: 3.5

References

http://secunia.com/advisories/33776
http://www.securityfocus.com/bid/33549
http://www.securitytracker.com/id?1021654
http://www.vmware.com/security/advisories/VMSA-2009-0001.html
http://www.vupen.com/english/advisories/2009/0301
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5909
http://secunia.com/advisories/33776
http://www.securityfocus.com/bid/33549
http://www.securitytracker.com/id?1021654
http://www.vmware.com/security/advisories/VMSA-2009-0001.html
http://www.vupen.com/english/advisories/2009/0301
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5909

Get alerted when CVE-2008-4914 or the next vulnerability affects your stack