PT-2018-17859 · Vmware · Vmware Esxi 6.5+3

Publicado 2018-12-04 · Atualizado 2022-02-03 · CVE-2018-6982

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware ESXi 6.7 without ESXi670-201811401-BG VMware ESXi 6.5 without ESXi650-201811301-BG

Description The issue concerns the use of uninitialized stack memory in the vmxnet3 virtual network adapter, potentially leading to an information leak from the host to the guest.

Recommendations For VMware ESXi 6.7 without ESXi670-201811401-BG, apply the patch ESXi670-201811401-BG to resolve the issue. For VMware ESXi 6.5 without ESXi650-201811301-BG, apply the patch ESXi650-201811301-BG to resolve the issue.

Correção

Use of Uninitialized Resource

Enumeração de Fraquezas

CWE-908

Identificadores relacionados

CVE-2018-6982

Produtos afetados

Vmware Esxi 6.5

Vmware Esxi 6.7

Vmware Workstation

Vmxnet3

Referências · 5

• http://securityfocus.com/bid/105882 · Nota
• https://osv.dev/vulnerability/CVE-2018-6982 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6982 · Nota de Segurança
• http://securitytracker.com/id/1042055 · Nota
• https://vmware.com/security/advisories/VMSA-2018-0027.html · Aviso do Fabricante