PT-2020-4396 · Vmware · Vmware Fusion+2

Reno Robert · Published 2020-10-15 · Updated 2021-07-21 · CVE-2020-3981

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: VMware ESXi versions 7.0 before ESXi 7.0.1-0.0.16850804 VMware ESXi versions 6.7 before ESXi670-202008101-SG VMware ESXi versions 6.5 before ESXi650-202007101-SG VMware Workstation versions 15.x VMware Fusion versions 11.x before 11.5.6

Description: The issue is related to an out-of-bounds read vulnerability due to a time-of-check time-of-use problem in the ACPI device. This could allow a malicious actor with administrative access to a virtual machine to leak memory from the vmx process. The vulnerability may also enable an attacker to gain unauthorized access to protected information.

Recommendations: For VMware ESXi versions 7.0 before ESXi 7.0.1-0.0.16850804, update to ESXi 7.0.1-0.0.16850804 or later. For VMware ESXi versions 6.7 before ESXi670-202008101-SG, apply the ESXi670-202008101-SG patch. For VMware ESXi versions 6.5 before ESXi650-202007101-SG, apply the ESXi650-202007101-SG patch. For VMware Workstation versions 15.x, there is no information about a newer version that contains a fix for this vulnerability. For VMware Fusion versions 11.x before 11.5.6, update to version 11.5.6 or later.

Time Of Check To Time Of Use

Out of bounds Read

Weakness Enumeration

CWE-367

CWE-125

Related Identifiers

BDU:2020-04909

CVE-2020-3981

ZDI-20-1267

Affected Products

Vmware Esxi

Vmware Fusion

Vmware Workstation

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-3981 · Security Note
• https://bdu.fstec.ru/vul/2020-04909 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-1267 · Security Note
• https://vmware.com/security/advisories/VMSA-2020-0023.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3981 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/1963 · Telegram Post