6.5

CVE-2017-4938

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Workstation Version 12.0.0
VMware ≫ Workstation Version 12.0.1
VMware ≫ Workstation Version 12.1
VMware ≫ Workstation Version 12.1.1
VMware ≫ Workstation Version 12.5
VMware ≫ Workstation Version 12.5.1
VMware ≫ Workstation Version 12.5.2
VMware ≫ Workstation Version 12.5.3
VMware ≫ Workstation Version 12.5.4
VMware ≫ Workstation Version 12.5.5
VMware ≫ Workstation Version 12.5.6
VMware ≫ Workstation Version 12.5.7
VMware ≫ Fusion Version 8.0.0
VMware ≫ Fusion Version 8.0.1
VMware ≫ Fusion Version 8.0.2
VMware ≫ Fusion Version 8.1.0
VMware ≫ Fusion Version 8.1.1
VMware ≫ Fusion Version 8.5.0
VMware ≫ Fusion Version 8.5.1
VMware ≫ Fusion Version 8.5.2
VMware ≫ Fusion Version 8.5.3
VMware ≫ Fusion Version 8.5.4
VMware ≫ Fusion Version 8.5.5
VMware ≫ Fusion Version 8.5.6
VMware ≫ Fusion Version 8.5.7
VMware ≫ Fusion Version 8.5.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.283
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2 4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://www.securitytracker.com/id/1039835
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2017-0018.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101887
Third Party Advisory
VDB Entry