Unscored CVE-2018-6974 EUVD-2018-18718GHSA-5vq3-72qx-fm2c

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x befo…

Published Oct 16, 2018 · Updated Sep 16, 2024 · Assigned by vmware

Vendor: VMware Product: ESXi Product: Fusion Product: Workstation Category: Virtualization

Description

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

Affected products

Vendor	Product	Affected	Fixed
VMware	ESXi	6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, 6.0 before ESXi600-201808401-BG	—
VMware	Workstation	14.x before 14.1.3	—
VMware	Fusion	10.x before 10.1.3	—

References

105660 vdb-entry
1041876 vdb-entry
1041875 vdb-entry
https://www.vmware.com/security/advisories/VMSA-2018-0026.html