KLA11329 DoS vulnerability in VMware products

Infinite loop vulnerability was found in VMware Workstation and VMware Fusion. Malicious users can exploit this vulnerability to cause denial of service.

Technical details

This vulnerability can be exploited if 3D-acceleration feature is enabled. It’s enabled by default on Workstation and Fusion. It’s needed to disable 3D-acceleration feature to mitigate this vulnerability.

Original advisories

VMSA-2018-0025

Related products

VMware-Workstation

VMware-Fusion

CVE list

CVE-2018-6977 warning

Solution

Disable 3D-acceleration feature

KB59146

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• VMware WorkstationVMware Fusion