Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11457
HistoryMar 28, 2019 - 12:00 a.m.

KLA11457 Multiple vulnerabilities in VMware Workstation and Fusion

2019-03-2800:00:00
Kaspersky Lab
threats.kaspersky.com
34

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.085 Low

EPSS

Percentile

94.3%

JSON

Detect date:

03/28/2019

Severity:

Critical

Description:

Multiple vulnerabilities were found in VMware Workstation and Fusion. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code and cause denial of service.

Affected products:

VMware Workstation 15.x earlier than 15.0.4
VMware Workstation 14.x earlier than 14.1.7
VMware Fusion 11.x earlier than 11.0.3
VMware Fusion 10.x earlier than 10.1.6

Solution:

Update to the latest version
Download Fusion

Original advisories:

VMSA-2019-0005

Impacts:

ACE

Related products:

VMware Workstation

CVE-IDS:

CVE-2019-55146.8High
CVE-2019-55159.0Critical
CVE-2019-55187.2High
CVE-2019-55197.2High
CVE-2019-55249.0Critical

Related

nessus 4
vmware 2
prion 5
cvelist 5
zdi 4
cve 5
attackerkb 1
checkpoint_advisories 1
ibm 1
nessus
nessus
VMSA-2019-0005 : VMware ESXi, Workstation and Fusion updates address multiple security issues
2019-04-01 00:00:00
VMware Fusion 10.x < 10.1.6 / 11.x < 11.0.3 Multiple Vulnerabilities (VMSA-2019-0005) (macOS)
2019-03-29 00:00:00
VMware Workstation 14.x < 14.1.7 / 15.x < 15.0.4 Multiple Vulnerabilities (VMSA-2019-0005)
2019-03-29 00:00:00
vmware
vmware
VMware ESXi, Workstation and Fusion updates address multiple security issues.
2019-03-28 00:00:00
VMware ESXi, Workstation and Fusion updates address multiple security issues.
2019-03-28 00:00:00
prion
prion
Out-of-bounds
2019-04-02 15:29:00
Out-of-bounds
2019-04-01 21:30:00
Improper access control
2019-04-01 21:30:00
cvelist
cvelist
CVE-2019-5524
2019-04-02 14:08:48
CVE-2019-5518
2019-04-01 20:39:57
CVE-2019-5519
2019-04-01 20:39:47
zdi
zdi
(Pwn2Own) VMware Workstation UHCI Out-Of-Bounds Access Privilege Escalation Vulnerability
2019-04-17 00:00:00
(Pwn2Own) VMware Workstation UHCI Race Condition Privilege Escalation Vulnerability
2019-04-17 00:00:00
VMware Workstation e1000 Memory Corruption Privilege Escalation Vulnerability
2019-05-29 00:00:00
cve
cve
CVE-2019-5518
2019-04-01 21:30:00
CVE-2019-5524
2019-04-02 15:29:00
CVE-2019-5519
2019-04-01 21:30:00
attackerkb
attackerkb
VMWare Fusion APIs available without auth via web socket (CVE-2019-5514)
2019-04-01 00:00:00
checkpoint_advisories
checkpoint_advisories
VMware Fusion Remote Code Execution (CVE-2019-5514)
2019-05-12 00:00:00
ibm
ibm
Security Bulletin: Multiple open source vulnerabilities affect IBM PureApplication System
2019-06-10 07:30:01

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.085 Low

EPSS

Percentile

94.3%

JSON
Related for KLA11457
nessus4vmware2prion5cvelist5zdi4cve5attackerkb1checkpoint_advisories1ibm1