PT-2018-17843 · Vmware · Vmware Fusion+1

Published 2018-05-22 · Updated 2018-06-26 · CVE-2018-6963

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.x before 14.1.2 VMware Fusion versions 10.x before 10.1.2

Description The issue is related to NULL pointer dereference problems in the RPC handler, which can lead to denial-of-service conditions. An attacker with limited privileges on the guest machine may be able to trigger a denial-of-service of their guest machine.

Recommendations For VMware Workstation versions 14.x before 14.1.2, update to version 14.1.2 or later. For VMware Fusion versions 10.x before 10.1.2, update to version 10.1.2 or later.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2018-6963

ZDI-18-532

ZDI-18-533

Affected Products

Vmware Fusion

Vmware Workstation

References · 7

• https://vmware.com/security/advisories/VMSA-2018-0013.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6963 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-533 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-6963 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-532 · Security Note
• http://securitytracker.com/id/1040957 · Note
• http://securityfocus.com/bid/104237 · Note