PT-2018-2008 · Vmware · Vmware Fusion+1

Published 2018-11-22 · Updated 2018-12-19 · CVE-2018-6983

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.1.5 and earlier, 15.0.2 and earlier VMware Fusion versions 10.1.5 and earlier, 11.0.2 and earlier

Description The issue is caused by an integer overflow in the virtual network devices of the software. This may allow a guest to execute code on the host, potentially permitting a remote attacker to run arbitrary code.

Recommendations For VMware Workstation versions 14.1.5 and earlier, update to version 14.1.5 or later. For VMware Workstation versions 15.0.2 and earlier, update to version 15.0.2 or later. For VMware Fusion versions 10.1.5 and earlier, update to version 10.1.5 or later. For VMware Fusion versions 11.0.2 and earlier, update to version 11.0.2 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2018-01624

CVE-2018-6983

Affected Products

Vmware Fusion

Vmware Workstation

References · 7

• https://bdu.fstec.ru/vul/2018-01624 · Security Note
• https://vmware.com/security/advisories/VMSA-2018-0030.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6983 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6983 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/153238 · Note
• http://securityfocus.com/bid/105986 · Note
• https://securitylab.ru/vulnerability/496649.php; · Note