Description
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware ESXi | 8.0 – < ESXi80U2sb-23305545, 8.0 – < ESXi80U1d-23299997, 7.0 – < ESXi70U3p-23307199 | ESXi80U2sb-23305545 |
| — | VMware Workstation | 17.x – < 17.5.1 | 17.5.1 |
| — | VMware Fusion | 13.x – < 13.5.1 | 13.5.1 |
| — | VMware Cloud Foundation | 5.x, 4.x | — |
Advisories 1
- WID-SEC-2024-0555 VMware Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2024