CVE-2020-3982

Katalog CVE

CVSS 7.7 · High EPSS 0,84%

Kerentanan Time-of-check Time-of-use (TOCTOU) Race Condition pada vmware esxi. Skor CVSS 3.1 7.7 (High) menurut NVD.

Deskripsi (NVD)

VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds write vulnerability due to a time-of-check time-of-use issue in ACPI device. A malicious actor with administrative access to a virtual machine may be able to exploit this vulnerability to crash the virtual machine's vmx process or corrupt hypervisor's memory heap.

Rincian

Terbit di NVD

20 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.7 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,84% peluang dieksploitasi; lebih tinggi dari 56,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 225 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.vmware.com/security/advisories/VMSA-2020-0023.html patch · advisory vendor