CVSS 7.1 · High EPSS 2,3%
Kerentanan Allocation of Resources Without Limits or Throttling pada vmware cloud foundation, vmware workstation +2 lainnya. Skor CVSS 3.1 7.1 (High) menurut vmware.com.
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| vmware | cloud foundation | Versi 4.0 hingga 5.0 |
| vmware | workstation | Versi 17.0.0 hingga sebelum 17.5.1 |
| vmware | esxi | Versi 7.0 |
| vmware | esxi | Versi 7.0 update_1 |
| vmware | esxi | Versi 7.0 update_1a |
| vmware | esxi | Versi 7.0 update_1b |
| vmware | esxi | Versi 7.0 update_1c |
| vmware | esxi | Versi 7.0 update_1d |
| vmware | esxi | Versi 7.0 update_1e |
| vmware | esxi | Versi 7.0 update_2 |
| vmware | esxi | Versi 7.0 update_2a |
| vmware | esxi | Versi 7.0 update_2c |
| vmware | esxi | Versi 7.0 update_2d |
| vmware | esxi | Versi 7.0 update_2e |
| vmware | esxi | Versi 7.0 update_3 |
| vmware | esxi | Versi 7.0 update_3c |
| vmware | esxi | Versi 7.0 update_3d |
| vmware | esxi | Versi 7.0 update_3e |
| vmware | esxi | Versi 7.0 update_3f |
| vmware | esxi | Versi 7.0 update_3g |
| vmware | esxi | Versi 7.0 update_3i |
| vmware | esxi | Versi 7.0 update_3j |
| vmware | esxi | Versi 7.0 update_3k |
| vmware | esxi | Versi 7.0 update_3l |
| vmware | esxi | Versi 7.0 update_3m |
| vmware | esxi | Versi 7.0 update_3n |
| vmware | esxi | Versi 7.0 update_3o |
| vmware | esxi | Versi 7.0.0 b |
| vmware | esxi | Versi 8.0 |
| vmware | esxi | Versi 8.0 a |
| vmware | esxi | Versi 8.0 b |
| vmware | esxi | Versi 8.0 c |
| vmware | esxi | Versi 8.0 update_1 |
| vmware | esxi | Versi 8.0 update_1a |
| vmware | esxi | Versi 8.0 update_1c |
| vmware | esxi | Versi 8.0 update_2 |
| vmware | fusion | Versi 13.0.0 hingga sebelum 13.5.1 |