Skip to content
OpenAdvisories
Unscored CVE-2020-3959 EUVD-2020-25224GHSA-h8p9-vqgm-6wpx

VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusio…

Published May 29, 2020 · Updated Aug 4, 2024 · Assigned by vmware

Description

VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service.

Affected products

VendorProductAffectedFixed
VMware VMware ESXi 6.7 before ESXi670-202004101-SG, 6.5 before ESXi650-202005401-SG —
VMware VMware Workstation 15.x before 15.1.0 —
VMware VMware Fusion 11.x before 11.1.0 —

References