PT-2019-4081 · Vmware · Vmware Fusion+1

Publicado 2019-09-19 · Atualizado 2021-07-21 · CVE-2019-5535

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion (affected versions not specified)

Description The issue is related to improper handling of certain IPv6 packets, which can lead to a network denial-of-service. It is also described as being due to insufficient input validation, allowing a remote attacker to cause a denial-of-service by sending a specially crafted IPv6 packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-04644

CVE-2019-5535

Produtos afetados

Vmware Fusion

Vmware Workstation

Referências · 4

• https://vmware.com/security/advisories/VMSA-2019-0014.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-04644 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-5535 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5535 · Aviso do Fabricante