CVSS 8.4 · High EPSS 0,28%
Kerentanan Out-of-bounds Read pada vmware fusion, vmware workstation +1 lainnya. Skor CVSS 3.1 8.4 (High) menurut NVD.
VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a virtual NVMe controller present may be able to read privileged information contained in physical memory.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| vmware | fusion | Versi 11.0.0 hingga sebelum 11.5.5 |
| vmware | workstation | Versi 15.0.0 hingga sebelum 15.5.5 |
| vmware | vsphere esxi | Versi 6.5 |
| vmware | vsphere esxi | Versi 6.5 650-201701001 |
| vmware | vsphere esxi | Versi 6.5 650-201703001 |
| vmware | vsphere esxi | Versi 6.5 650-201703002 |
| vmware | vsphere esxi | Versi 6.5 650-201704001 |
| vmware | vsphere esxi | Versi 6.5 650-201710001 |
| vmware | vsphere esxi | Versi 6.5 650-201712001 |
| vmware | vsphere esxi | Versi 6.5 650-201803001 |
| vmware | vsphere esxi | Versi 6.5 650-201806001 |
| vmware | vsphere esxi | Versi 6.5 650-201808001 |
| vmware | vsphere esxi | Versi 6.5 650-201810001 |
| vmware | vsphere esxi | Versi 6.5 650-201810002 |
| vmware | vsphere esxi | Versi 6.5 650-201811001 |
| vmware | vsphere esxi | Versi 6.5 650-201901001 |
| vmware | vsphere esxi | Versi 6.5 650-201903001 |
| vmware | vsphere esxi | Versi 6.5 650-201905001 |
| vmware | vsphere esxi | Versi 6.5 650-201908001 |
| vmware | vsphere esxi | Versi 6.5 650-201910001 |
| vmware | vsphere esxi | Versi 6.7 |
| vmware | vsphere esxi | Versi 6.7 670-201911001 |
| vmware | vsphere esxi | Versi 6.7 670-202004001 |