Lucene search

VmwareCVE-2018-6983

HistoryNov 27, 2018 - 5:29 p.m.

CVE-2018-6983

2018-11-2717:29:00

CWE-190

vmware

web.nvd.nist.gov

vmware

workstation

fusion

cve-2018-6983

security

vulnerability

code execution

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

Percentile

14.2%

JSON

VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host.

Affected configurations

Nvd

Node

vmwareworkstationRange14.0.0–14.1.5

vmwareworkstationRange15.0.0–15.0.2

Node

applemac_os_xMatch-

AND

vmwarefusionRange10.0.0–10.1.5

vmwarefusionRange11.0.0–11.0.2

VendorProductVersionCPE
vmwareworkstation*cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
applemac_os_x-cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
vmwarefusion*cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	workstation	*	cpe:2.3:a:vmware:workstation::::::::
apple	mac_os_x	-	cpe:2.3:o:apple:mac_os_x:-:::::::*
vmware	fusion	*	cpe:2.3:a:vmware:fusion::::::::

CNA Affected

[
  {
    "product": "VMware Workstation and Fusion",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105986

www.vmware.com/security/advisories/VMSA-2018-0030.html

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

Percentile

14.2%

JSON

Related for CVE-2018-6983