KLA12096 Multiple vulnerabilities in VMware Workstation and Player

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. A memory leak vulnerability in VMCI module can be exploited locally to cause denial of service.
2. A denial of service vulnerability in Shader functionality can be exploited to cause denial of service.

Original advisories

VMSA-2020-0011

Related products

VMware-Workstation

VMware-Player

CVE list

CVE-2020-3959 warning

CVE-2020-3958 high

Solution

Update to the latest version

Download VMWare Workstation

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• VMware Workstation 15.x earlier than 15.5.2VMware Player 15.x earlier than 15.5.2