Unscored CVE-2017-4925 EUVD-2017-14042GHSA-vm9p-h4v4-cfq7

VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-S…

Published Sep 15, 2017 · Updated Sep 17, 2024 · Assigned by vmware

Vendor: VMware Product: ESXi Product: Fusion Product: Workstation Category: Virtualization

Description

VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected products

Vendor	Product	Affected	Fixed
VMware	ESXi	6.5 without patch ESXi650-201707101-SG, 6.0 without patch ESXi600-201706101-SG, 5.5 without patch ESXi550-201709101-SG	—
VMware	Workstation	12.x before 12.5.3	—
VMware	Fusion	8.x before 8.5.4	—

References

1039368 vdb-entry
100842 vdb-entry
https://www.vmware.com/security/advisories/VMSA-2017-0015.html
1039367 vdb-entry