Skip to content
OpenAdvisories
Unscored CVE-2018-6972 EUVD-2018-18716GHSA-xmm5-6qh4-9f74

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-20180…

Published Jul 25, 2018 · Updated Sep 16, 2024 · Assigned by vmware

Vendor: VMware Product: ESXi Product: Fusion Product: Workstation Category: Virtualization

Description

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected products

VendorProductAffectedFixed
VMware ESXi 6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG, 5.5 before ESXi550-201806401-BG —
VMware Workstation 14.x before 14.1.2 —
VMware Fusion 10.x before 10.1.2 —

References