PT-2018-2008 · Vmware · Vmware Fusion+1

Publicado 2018-11-22 · Atualizado 2018-12-19 · CVE-2018-6983

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.1.5 and earlier, 15.0.2 and earlier VMware Fusion versions 10.1.5 and earlier, 11.0.2 and earlier

Description The issue is caused by an integer overflow in the virtual network devices of the software. This may allow a guest to execute code on the host, potentially permitting a remote attacker to run arbitrary code.

Recommendations For VMware Workstation versions 14.1.5 and earlier, update to version 14.1.5 or later. For VMware Workstation versions 15.0.2 and earlier, update to version 15.0.2 or later. For VMware Fusion versions 10.1.5 and earlier, update to version 10.1.5 or later. For VMware Fusion versions 11.0.2 and earlier, update to version 11.0.2 or later.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

BDU:2018-01624

CVE-2018-6983

Produtos afetados

Vmware Fusion

Vmware Workstation

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/153238 · Nota
• https://bdu.fstec.ru/vul/2018-01624 · Nota de Segurança
• https://vmware.com/security/advisories/VMSA-2018-0030.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6983 · Nota de Segurança
• http://securityfocus.com/bid/105986 · Nota
• https://securitylab.ru/vulnerability/496649.php; · Nota
• https://osv.dev/vulnerability/CVE-2018-6983 · Aviso do Fabricante