Kaspersky LabKLA12102KLA12102 DoS vulnerability in VMware Workstation and Player
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
6.3 Medium
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
14.2%
Detect date:
02/09/2020
Severity:
Warning
Description:
A denial of service vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to cause denial of service.
Affected products:
VMware Workstation 15.x earlier than 15.5.7
VMware Player 15.x earlier than 15.5.7
Solution:
Update to the latest version
Download VMWare Workstation
Original advisories:
Impacts:
DoS
Related products:
CVE-IDS:
CVE-2020-39996.5High
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3999
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/VMware-Player/
threats.kaspersky.com/en/product/VMware-Workstation/
www.vmware.com/products/workstation-player/workstation-player-evaluation.html
www.vmware.com/security/advisories/VMSA-2020-0029.html
Related
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
6.3 Medium
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
14.2%