medium5.3
CVE-2018-6957
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by openi…
Impact
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation Pro | from 14.0 before 14.1.1 Versions 12.0, 12.1, 12.01, 12.1.1, 12.5 |
| Vmware | Workstation Player | from 14.0 before 14.1.1 Versions 12.0, 12.0.1, 12.1, 12.1.1, 12.5 |
| Vmware | Fusion | Versions 8.0, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103431
- http://www.securitytracker.com/id/1040539
- https://www.vmware.com/security/advisories/VMSA-2018-0008.html
- http://www.securityfocus.com/bid/103431
- http://www.securitytracker.com/id/1040539
- https://www.vmware.com/security/advisories/VMSA-2018-0008.html