PT-2015-1323 · Vmware · Vmware Player+2

Publicado 2015-06-13 · Atualizado 2016-12-31 · CVE-2015-2341

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.5 VMware Fusion versions 6.x through 6.0.5 and versions 7.x through 7.0.0

Description The issue exists due to insufficient input validation in the hypervisor, allowing an attacker to cause a denial of service against a 32-bit guest OS or 64-bit host OS using a specially crafted RPC request.

Recommendations For VMware Workstation versions 10.x through 10.0.4, update to version 10.0.5 or later. For VMware Player versions 6.x through 6.0.5, update to version 6.0.6 or later. For VMware Fusion versions 6.x through 6.0.5, update to version 6.0.6 or later. For VMware Fusion versions 7.x through 7.0.0, update to version 7.0.1 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-10391

BDU:2015-10392

BDU:2015-10393

CVE-2015-2341

Produtos afetados

Vmware Fusion

Vmware Player

Vmware Workstation

Referências · 8

• http://securityfocus.com/bid/75094 · Nota
• https://bdu.fstec.ru/vul/2015-10392 · Nota de Segurança
• http://vmware.com/security/advisories/VMSA-2015-0004.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2341 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2341 · Nota
• http://securitytracker.com/id/1032530 · Nota
• https://bdu.fstec.ru/vul/2015-10393 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10391 · Nota de Segurança