PT-2019-4081 · Vmware · Vmware Fusion+1

Published 2019-09-19 · Updated 2021-07-21 · CVE-2019-5535

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion (affected versions not specified)

Description The issue is related to improper handling of certain IPv6 packets, which can lead to a network denial-of-service. It is also described as being due to insufficient input validation, allowing a remote attacker to cause a denial-of-service by sending a specially crafted IPv6 packet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-04644

CVE-2019-5535

Affected Products

Vmware Fusion

Vmware Workstation

References · 4

• https://vmware.com/security/advisories/VMSA-2019-0014.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04644 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-5535 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5535 · Vendor Advisory