CVE-2017-4905

🗓️ 07 Jun 2017 18:00:00Reported by vmwareType

VMware ESXi 6.5, 6.0, and 5.5 and Workstation Pro/Payer 12.x; Fusion Pro/Fusion 8.x uninitialized memory usage leading to information lea

Reporter	Title	Published	Views	Family All 24
0day.today	VMware WorkStation 12.5.3 - Virtual Machine Escape Exploit	25 Nov 201900:00	–	zdt
Gitee	Exploit for Use of Uninitialized Resource in Vmware Fusion	14 Sep 202518:01	–	gitee
IBM Security Bulletins	Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)	25 Jun 201919:40	–	ibm
CNVD	Multiple VMware Product Local Information Disclosure Vulnerabilities	30 Mar 201700:00	–	cnvd
CVE	CVE-2017-4905	7 Jun 201718:00	–	cve
EUVD	EUVD-2017-14022	7 Oct 202500:30	–	euvd
exploitpack	VMware WorkStation 12.5.3 - Virtual Machine Escape	6 Jun 201900:00	–	exploitpack
Tenable Nessus	VMware Fusion 8.x < 8.5.6 Multiple Vulnerabilities (VMSA-2017-0006) (macOS)	30 Mar 201700:00	–	nessus
Tenable Nessus	ESXi 5.5 < Build 5230635 Multiple Vulnerabilities (VMSA-2017-0006) (remote check)	31 Mar 201700:00	–	nessus
Tenable Nessus	ESXi 6.0 U1 < Build 5251621 / 6.0 U2 < Build 5251623 / 6.0 U3 < Build 5224934 Multiple Vulnerabilities (VMSA-2017-0006) (remote check)	31 Mar 201700:00	–	nessus

[
  {
    "product": "ESXi",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 without patch ESXi650-201703410-SG"
      },
      {
        "status": "affected",
        "version": "6.0 U3 without patch ESXi600-201703401-SG"
      },
      {
        "status": "affected",
        "version": "6.0 U2 without patch ESXi600-201703403-SG"
      },
      {
        "status": "affected",
        "version": "6.0 U1 without patch ESXi600-201703402-SG"
      },
      {
        "status": "affected",
        "version": "5.5 without patch ESXi550-201703401-SG"
      }
    ]
  },
  {
    "product": "Workstation Pro / Player",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "12.x prior to 12.5.5"
      }
    ]
  },
  {
    "product": "Fusion Pro / Fusion",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "8.x prior to 8.5.6"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/97164
securitytracker	www.securitytracker.com/id/1038148
vmware	www.vmware.com/security/advisories/VMSA-2017-0006.html
securitytracker	www.securitytracker.com/id/1038149

11 Jul 2017 09:57Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.03439