CVE-2014-8370

Опубликовано: 29 янв. 2015

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.

Ссылки

http://jvn.jp/en/jp/JVN88252465/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007
Third Party Advisory
VDB Entry
http://secunia.com/advisories/62551
http://secunia.com/advisories/62605
http://secunia.com/advisories/62669
http://www.securityfocus.com/bid/72338
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031642
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031643
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2015-0001.html
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100933
http://jvn.jp/en/jp/JVN88252465/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007
Third Party Advisory
VDB Entry
http://secunia.com/advisories/62551
http://secunia.com/advisories/62605
http://secunia.com/advisories/62669
http://www.securityfocus.com/bid/72338
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031642
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031643
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2015-0001.html
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100933

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:player:6.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:6.0.4:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:vmware:fusion:6.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:6.0.4:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:vmware:workstation:10.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:10.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:10.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:10.0.4:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*

cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*

cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esxi:5.1:1:*:*:*:*:*:*

cpe:2.3:o:vmware:esxi:5.5:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01041

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-3g8q-4222-255f

github

больше 3 лет назад

EPSS

Процентиль: 77%

0.01041

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-264