PT-2018-17843 · Vmware · Vmware Fusion+1

Publicado 2018-05-22 · Atualizado 2018-06-26 · CVE-2018-6963

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.x before 14.1.2 VMware Fusion versions 10.x before 10.1.2

Description The issue is related to NULL pointer dereference problems in the RPC handler, which can lead to denial-of-service conditions. An attacker with limited privileges on the guest machine may be able to trigger a denial-of-service of their guest machine.

Recommendations For VMware Workstation versions 14.x before 14.1.2, update to version 14.1.2 or later. For VMware Fusion versions 10.x before 10.1.2, update to version 10.1.2 or later.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2018-6963

ZDI-18-532

ZDI-18-533

Produtos afetados

Vmware Fusion

Vmware Workstation

Referências · 7

• http://securitytracker.com/id/1040957 · Nota
• https://vmware.com/security/advisories/VMSA-2018-0013.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-6963 · Aviso do Fabricante
• http://securityfocus.com/bid/104237 · Nota
• https://zerodayinitiative.com/advisories/ZDI-18-533 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-6963 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-532 · Nota de Segurança