Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3gx-v2m9-m8vc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.

VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.

EPSS

Процентиль: 71%
0.00663
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.5
nvd
больше 6 лет назад

VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.

CVSS3: 6.5
fstec
больше 6 лет назад

Уязвимость функции 3D графики гипервизоров VMware ESXi, VMware Workstation и VMware Fusion, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 71%
0.00663
Низкий

Дефекты

CWE-20