Lucene search

[email protected]CVE-2018-6972

HistoryJul 25, 2018 - 1:29 p.m.

CVE-2018-6972

2018-07-2513:29:00

CWE-476

[email protected]

web.nvd.nist.gov

vmware

esxi

workstation

fusion

2018-06-401

14.x

10.x

denial of service

null pointer dereference

rpc handler

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

JSON

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected configurations

NVD

Node

vmwareworkstationRange14.0–14.1.2

Node

applemac_os_xMatch-

AND

vmwarefusionRange10.0–10.1.2

Node

vmwareesxiMatch5.5-

vmwareesxiMatch5.51

vmwareesxiMatch5.52

vmwareesxiMatch5.53a

vmwareesxiMatch5.53b

vmwareesxiMatch5.5550-20170901001s

vmwareesxiMatch5.5550-20170904001

vmwareesxiMatch6.0-

vmwareesxiMatch6.01

vmwareesxiMatch6.01a

vmwareesxiMatch6.01b

vmwareesxiMatch6.02

vmwareesxiMatch6.03

vmwareesxiMatch6.03a

vmwareesxiMatch6.0600-201504401

vmwareesxiMatch6.0600-201505401

vmwareesxiMatch6.0600-201507101

vmwareesxiMatch6.0600-201507102

vmwareesxiMatch6.0600-201507401

vmwareesxiMatch6.0600-201507402

vmwareesxiMatch6.0600-201507403

vmwareesxiMatch6.0600-201507404

vmwareesxiMatch6.0600-201507405

vmwareesxiMatch6.0600-201507406

vmwareesxiMatch6.0600-201507407

vmwareesxiMatch6.0600-201509101

vmwareesxiMatch6.0600-201509102

vmwareesxiMatch6.0600-201509201

vmwareesxiMatch6.0600-201509202

vmwareesxiMatch6.0600-201509203

vmwareesxiMatch6.0600-201509204

vmwareesxiMatch6.0600-201509205

vmwareesxiMatch6.0600-201509206

vmwareesxiMatch6.0600-201509207

vmwareesxiMatch6.0600-201509208

vmwareesxiMatch6.0600-201509209

vmwareesxiMatch6.0600-201509210

vmwareesxiMatch6.0600-201510401

vmwareesxiMatch6.0600-201511401

vmwareesxiMatch6.0600-201601101

vmwareesxiMatch6.0600-201601102

vmwareesxiMatch6.0600-201601401

vmwareesxiMatch6.0600-201601402

vmwareesxiMatch6.0600-201601403

vmwareesxiMatch6.0600-201601404

vmwareesxiMatch6.0600-201601405

vmwareesxiMatch6.0600-201602401

vmwareesxiMatch6.0600-201603101

vmwareesxiMatch6.0600-201603102

vmwareesxiMatch6.0600-201603201

vmwareesxiMatch6.0600-201603202

vmwareesxiMatch6.0600-201603203

vmwareesxiMatch6.0600-201603204

vmwareesxiMatch6.0600-201603205

vmwareesxiMatch6.0600-201603206

vmwareesxiMatch6.0600-201603207

vmwareesxiMatch6.0600-201603208

vmwareesxiMatch6.0600-201605401

vmwareesxiMatch6.0600-201608101

vmwareesxiMatch6.0600-201608401

vmwareesxiMatch6.0600-201608402

vmwareesxiMatch6.0600-201608403

vmwareesxiMatch6.0600-201608404

vmwareesxiMatch6.0600-201608405

vmwareesxiMatch6.0600-201610410

vmwareesxiMatch6.0600-201611401

vmwareesxiMatch6.0600-201611402

vmwareesxiMatch6.0600-201611403

vmwareesxiMatch6.0600-201702101

vmwareesxiMatch6.0600-201702102

vmwareesxiMatch6.0600-201702201

vmwareesxiMatch6.0600-201702202

vmwareesxiMatch6.0600-201702203

vmwareesxiMatch6.0600-201702204

vmwareesxiMatch6.0600-201702205

vmwareesxiMatch6.0600-201702206

vmwareesxiMatch6.0600-201702207

vmwareesxiMatch6.0600-201702208

vmwareesxiMatch6.0600-201702209

vmwareesxiMatch6.0600-201702210

vmwareesxiMatch6.0600-201702211

vmwareesxiMatch6.0600-201702212

vmwareesxiMatch6.0600-201703401

vmwareesxiMatch6.0600-201706101

vmwareesxiMatch6.0600-201706102

vmwareesxiMatch6.0600-201706103

vmwareesxiMatch6.5-

vmwareesxiMatch6.52

vmwareesxiMatch6.5650-201701001

vmwareesxiMatch6.5650-201703001

vmwareesxiMatch6.5650-201703002

vmwareesxiMatch6.5650-201704001

vmwareesxiMatch6.5650-201707101

vmwareesxiMatch6.5650-201707102

vmwareesxiMatch6.5650-201707103

vmwareesxiMatch6.5650-201707201

vmwareesxiMatch6.5650-201707202

vmwareesxiMatch6.5650-201707203

vmwareesxiMatch6.5650-201707204

vmwareesxiMatch6.5650-201707205

vmwareesxiMatch6.5650-201707206

vmwareesxiMatch6.5650-201707207

vmwareesxiMatch6.5650-201707208

vmwareesxiMatch6.5650-201707209

vmwareesxiMatch6.5650-201707210

vmwareesxiMatch6.5650-201707211

vmwareesxiMatch6.5650-201707212

vmwareesxiMatch6.5650-201707213

vmwareesxiMatch6.5650-201707214

vmwareesxiMatch6.5650-201707215

vmwareesxiMatch6.5650-201707216

vmwareesxiMatch6.5650-201707217

vmwareesxiMatch6.5650-201707218

vmwareesxiMatch6.5650-201707219

vmwareesxiMatch6.5650-201707220

vmwareesxiMatch6.5650-201707221

vmwareesxiMatch6.5650-201710001

vmwareesxiMatch6.5650-201712001

vmwareesxiMatch6.5650-201803001

vmwareesxiMatch6.5650-201806001

vmwareesxiMatch6.7-

vmwareesxiMatch6.7670-201806001

CPENameOperatorVersion
vmware:workstationvmware workstationlt14.1.2

CPE	Name	Operator	Version
vmware:workstation	vmware workstation	lt	14.1.2

CNA Affected

[
  {
    "product": "ESXi",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "6.7 before ESXi670-201806401-BG"
      },
      {
        "status": "affected",
        "version": "6.5 before ESXi650-201806401-BG"
      },
      {
        "status": "affected",
        "version": "6.0 before ESXi600-201806401-BG"
      },
      {
        "status": "affected",
        "version": "5.5 before ESXi550-201806401-BG"
      }
    ]
  },
  {
    "product": "Workstation",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "14.x before 14.1.2"
      }
    ]
  },
  {
    "product": "Fusion",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "10.x before 10.1.2"
      }
    ]
  }
]