Memory Leak Vulnerability in VMware Products
CVE-2017-4905

5.5MEDIUM

Key Information:

Vendor
Vmware
Status
Esxi
Workstation Pro / Player
Fusion Pro / Fusion
Vendor
CVE Published:
7 June 2017

Summary

VMware products including ESXi, Workstation Pro, and Fusion suffer from a vulnerability due to uninitialized memory usage. This vulnerability can potentially allow unauthorized actors to access sensitive information. Affected versions of VMware ESXi (various patches), Workstation Pro, and Fusion are at risk, emphasizing the need for immediate attention and remediation to maintain data integrity and security.

Affected Version(s)

ESXi 6.5 without patch ESXi650-201703410-SG

ESXi 6.0 U3 without patch ESXi600-201703401-SG

ESXi 6.0 U2 without patch ESXi600-201703403-SG

References

http://www.securityfocus.com/bid/97164
vdb-entryx_refsource_BID
http://www.vmware.com/security/advisories/VMSA-2017-0006....
x_refsource_CONFIRM
http://www.securitytracker.com/id/1038148
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.