PT-2020-3008 · Vmware · Vmware Fusion+2

Published 2020-06-23 · Updated 2020-07-01 · CVE-2020-3971

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG VMware Workstation versions 15.x before 15.0.2 VMware Fusion versions 11.x before 11.0.2

Description The issue is related to a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory. This vulnerability is associated with a buffer overflow, which can allow an attacker to gain unauthorized access to protected information.

Recommendations For VMware ESXi versions 6.7 before ESXi670-201904101-SG, update to ESXi670-201904101-SG or later. For VMware ESXi versions 6.5 before ESXi650-201907101-SG, update to ESXi650-201907101-SG or later. For VMware Workstation versions 15.x before 15.0.2, update to 15.0.2 or later. For VMware Fusion versions 11.x before 11.0.2, update to 11.0.2 or later. As a temporary workaround, consider disabling the vmxnet3 network adapter until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2020-03231

CVE-2020-3971

Affected Products

Vmware Esxi

Vmware Fusion

Vmware Workstation

References · 5

• https://vmware.com/security/advisories/VMSA-2020-0015.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03231 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3971 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3971 · Vendor Advisory
• https://t.me/cvenotify/4650 · Telegram Post