NetSight
IP …
medium6.8

CVE-2019-5518

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), F…

Impact

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.

Affected products

VendorProductAffected versions
VmwareFusion
from 10.0.0 before 10.1.6
from 11.0.0 before 11.0.3
VmwareWorkstation
from 14.0.0 before 14.1.7
from 15.0.0 before 15.0.4
VmwareEsxi
Versions 6.0, 6.5, 6.7

Weakness classification

CWE-125CWE-787

References