PT-2018-17837 · Vmware · Vmware Fusion+1

Publicado 2018-03-15 · Atualizado 2019-10-03 · CVE-2018-6957

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.x before 14.1.1 VMware Workstation version 12.x VMware Fusion versions 10.x before 10.1.1 VMware Fusion version 8.x

Description The issue is a denial-of-service vulnerability that can be triggered by opening a large number of VNC sessions. For exploitation to be possible, VNC must be manually enabled.

Recommendations For VMware Workstation versions 14.x before 14.1.1, update to version 14.1.1 or later. For VMware Workstation version 12.x, consider disabling VNC to prevent exploitation until a patch is available. For VMware Fusion versions 10.x before 10.1.1, update to version 10.1.1 or later. For VMware Fusion version 8.x, consider disabling VNC to prevent exploitation until a patch is available.

Correção

DoS

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2018-6957

Produtos afetados

Vmware Fusion

Vmware Workstation

Referências · 5

• http://securityfocus.com/bid/103431 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6957 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6957 · Aviso do Fabricante
• https://vmware.com/security/advisories/VMSA-2018-0008.html · Aviso do Fabricante
• http://securitytracker.com/id/1040539 · Nota