CVE-2018-6957

Опубликовано: 15 мар. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 3.5

EPSS Низкий

Описание

VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.

Ссылки

http://www.securityfocus.com/bid/103431
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040539
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0008.html
Vendor Advisory
http://www.securityfocus.com/bid/103431
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040539
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0008.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.1.1 (исключая)

cpe:2.3:a:vmware:workstation_pro:12.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.01:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.6:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_pro:12.5.7:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.1.1 (исключая)

cpe:2.3:a:vmware:workstation_player:12.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.6:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation_player:12.5.7:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:vmware:fusion:8.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.1.1 (исключая)

EPSS

Процентиль: 59%

0.00379

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-772

Связанные уязвимости

GHSA-vxf5-fpm2-g9fg

CVSS3: 5.3

github

больше 3 лет назад

EPSS

Процентиль: 59%

0.00379

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-772