VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.
Weakness
The product uses or accesses a resource that has not been initialized.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Workstation | Vmware | 14.0.0 (including) | 14.1.4 (excluding) |
| Workstation | Vmware | 15.0.0 (including) | 15.0.0 (including) |
Potential Mitigations
References
- http://www.securityfocus.com/bid/105881
- http://www.securitytracker.com/id/1042054
- http://www.securitytracker.com/id/1042055
- https://www.vmware.com/security/advisories/VMSA-2018-0027.html
- http://www.securityfocus.com/bid/105881
- http://www.securitytracker.com/id/1042054
- http://www.securitytracker.com/id/1042055
- https://www.vmware.com/security/advisories/VMSA-2018-0027.html