CVE-2017-4904

🗓️ 07 Jun 2017 18:00:00Reported by vmwareType

VMware XHCI Controller Uninitialized Memory Usage CVE-2017-490

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)	25 Jun 201919:40	–	ibm
CNVD	Multiple VMware Product Memory Corruption Vulnerabilities (CNVD-2017-05000)	30 Mar 201700:00	–	cnvd
CVE	CVE-2017-4904	7 Jun 201718:00	–	cve
EUVD	EUVD-2017-14021	7 Oct 202500:30	–	euvd
Tenable Nessus	VMware Fusion 8.x < 8.5.6 Multiple Vulnerabilities (VMSA-2017-0006) (macOS)	30 Mar 201700:00	–	nessus
Tenable Nessus	ESXi 5.5 < Build 5230635 Multiple Vulnerabilities (VMSA-2017-0006) (remote check)	31 Mar 201700:00	–	nessus
Tenable Nessus	ESXi 6.0 U1 < Build 5251621 / 6.0 U2 < Build 5251623 / 6.0 U3 < Build 5224934 Multiple Vulnerabilities (VMSA-2017-0006) (remote check)	31 Mar 201700:00	–	nessus
Tenable Nessus	ESXi 6.5 < Build 5224529 Multiple Vulnerabilities (VMSA-2017-0006) (remote check)	31 Mar 201700:00	–	nessus
Tenable Nessus	VMSA-2017-0006 : VMware ESXi, Workstation and Fusion updates address critical and moderate security issues	30 Mar 201700:00	–	nessus
Tenable Nessus	VMware Workstation 12.x < 12.5.5 Multiple Vulnerabilities (VMSA-2017-0006) (Linux)	30 Mar 201700:00	–	nessus

[
  {
    "product": "ESXi",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 without patch ESXi650-201703410-SG"
      },
      {
        "status": "affected",
        "version": "6.0 U3 without patch ESXi600-201703401-SG"
      },
      {
        "status": "affected",
        "version": "6.0 U2 without patch ESXi600-201703403-SG"
      },
      {
        "status": "affected",
        "version": "6.0 U1 without patch ESXi600-201703402-SG"
      },
      {
        "status": "affected",
        "version": "5.5 without patch ESXi550-201703401-SG"
      }
    ]
  },
  {
    "product": "Workstation Pro / Player",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "12.x prior to 12.5.5"
      }
    ]
  },
  {
    "product": "Fusion Pro / Fusion",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "8.x prior to 8.5.6"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/97165
securitytracker	www.securitytracker.com/id/1038148
vmware	www.vmware.com/security/advisories/VMSA-2017-0006.html
securitytracker	www.securitytracker.com/id/1038149

11 Jul 2017 09:57Current

8.6High risk

Vulners AI Score8.6

EPSS0.00398