Unscored CVE-2017-4903 EUVD-2017-14020GHSA-9q76-gqr4-73cm

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6…

Published Jun 7, 2017 · Updated Aug 5, 2024 · Assigned by vmware

Vendor: VMware Product: ESXi Product: Fusion Pro / Fusion Product: Workstation Pro/Player Category: Virtualization

Description

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have an uninitialized stack memory usage in SVGA. This issue may allow a guest to execute code on the host.

Affected products

Vendor	Product	Affected	Fixed
VMware	ESXi	6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG	—
VMware	Workstation Pro / Player	12.x prior to 12.5.5	—
VMware	Fusion Pro / Fusion	8.x prior to 8.5.6	—

References

97160 vdb-entry
http://www.vmware.com/security/advisories/VMSA-2017-0006.html
1038148 vdb-entry
1038149 vdb-entry