5.5
CVE-2025-41227
- EPSS 0.16%
- Veröffentlicht 20.05.2025 14:24:29
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Erkennungen
Denial-of-Service Vulnerability
VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerVMware
≫
Produkt
ESXi
Default Statusunaffected
Version
8.0
Version <
ESXi80U3se-24659227
Status
affected
Version
7.0
Version <
ESXi70U3sv-24723868
Status
affected
HerstellerVMware
≫
Produkt
Cloud Foundation
Default Statusunaffected
Version
5.x, 4.5.x
Status
affected
HerstellerVMware
≫
Produkt
Telco Cloud Platform
Default Statusunaffected
Version
5.x, 4.x, 3.x, 2.x
Status
affected
HerstellerVMware
≫
Produkt
Telco Cloud Infrastructure
Default Statusunaffected
Version
3.x, 2.x
Status
affected
HerstellerVMware
≫
Produkt
Workstation
Default Statusunaffected
Version
17.x
Version <
17.6.3
Status
affected
HerstellerVMware
≫
Produkt
Fusion
Default Statusunaffected
Version
13.x
Version <
13.6.3
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.051 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| VMware | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717