vmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/vmware/ Sun, 26 Feb 2023 06:50:54 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png vmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/vmware/ 32 32 CVE-2018-6982 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6982/ Sun, 26 Feb 2023 06:50:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6982/ VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.

The post CVE-2018-6982 appeared first on CVE Vulnerability.

]]> VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.

The post CVE-2018-6982 appeared first on CVE Vulnerability.

]]> CVE-2018-6981 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6981/ Sun, 26 Feb 2023 06:50:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6981/ VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.

The post CVE-2018-6981 appeared first on CVE Vulnerability.

]]> VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.

The post CVE-2018-6981 appeared first on CVE Vulnerability.

]]> CVE-2018-6974 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6974/ Sun, 26 Feb 2023 06:50:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6974/ VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

The post CVE-2018-6974 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

The post CVE-2018-6974 appeared first on CVE Vulnerability.

]]> CVE-2018-6972 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6972/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6972/ VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

The post CVE-2018-6972 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

The post CVE-2018-6972 appeared first on CVE Vulnerability.

]]> CVE-2018-6970 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6970/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6970/ VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent […]

The post CVE-2018-6970 appeared first on CVE Vulnerability.

]]> VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn’t apply to Horizon 6, 7 Agents installed on Linux systems or Horizon Clients installed on non-Windows systems.

The post CVE-2018-6970 appeared first on CVE Vulnerability.

]]> CVE-2018-6969 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6969/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6969/ VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.

The post CVE-2018-6969 appeared first on CVE Vulnerability.

]]> VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.

The post CVE-2018-6969 appeared first on CVE Vulnerability.

]]> CVE-2018-6967 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6967/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6967/ VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966.

The post CVE-2018-6967 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6966.

The post CVE-2018-6967 appeared first on CVE Vulnerability.

]]> CVE-2018-6966 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6966/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6966/ VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6967.

The post CVE-2018-6966 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6965 and CVE-2018-6967.

The post CVE-2018-6966 appeared first on CVE Vulnerability.

]]> CVE-2018-6965 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6965/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6965/ VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6966 and CVE-2018-6967.

The post CVE-2018-6965 appeared first on CVE Vulnerability.

]]> VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6966 and CVE-2018-6967.

The post CVE-2018-6965 appeared first on CVE Vulnerability.

]]> CVE-2018-6964 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6964/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6964/ VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed.

The post CVE-2018-6964 appeared first on CVE Vulnerability.

]]> VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed.

The post CVE-2018-6964 appeared first on CVE Vulnerability.

]]>