CVE-2016-5329

Опубликовано: 29 дек. 2016

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.

Ссылки

http://www.securityfocus.com/bid/93888
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037103
http://www.vmware.com/security/advisories/VMSA-2016-0017.html
Vendor Advisory
http://www.securityfocus.com/bid/93888
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037103
http://www.vmware.com/security/advisories/VMSA-2016-0017.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00047

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-5539-pf3p-rw8q