This vulnerability in Veeam Service Provider Console involves memory allocation with an excessive size value, which can be triggered by an unauthenticated attacker. Exploitation leads to host memory exhaustion and denial of service. The CVSS 4.0 base score is 8.7, reflecting network attack vector, no required privileges or user interaction, and high impact on availability. There is no vendor advisory or patch information available at this time, and the affected versions are not explicitly stated.

An unauthenticated attacker can cause denial of service by exhausting the host's memory resources, potentially disrupting the availability of the Veeam Service Provider Console service. No information indicates compromise of confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the Service Provider Console to untrusted networks and monitor for unusual resource consumption patterns.