Lucene search

PRIOn knowledge basePRION:CVE-2017-4904

HistoryJun 07, 2017 - 6:29 p.m.

Code injection

2017-06-0718:29:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Denial of Service of the guest on ESXi 5.5.

CPENameOperatorVersion
esxieq6.0
esxieq6.5
esxieq5.5
esxieq6.0 1
esxieq6.0 1a
esxieq6.0 1b
esxieq6.0 2
esxieq6.0 3
esxieq6.0 3a
esxieq5.5 1

Name	Operator	Version
esxi	eq	6.0
esxi	eq	6.5
esxi	eq	5.5
esxi	eq	6.0 1
esxi	eq	6.0 1a
esxi	eq	6.0 1b
esxi	eq	6.0 2
esxi	eq	6.0 3
esxi	eq	6.0 3a
esxi	eq	5.5 1

Rows per page:

1-10 of 211

References

www.securityfocus.com/bid/97165

www.securitytracker.com/id/1038148

www.securitytracker.com/id/1038149

www.vmware.com/security/advisories/VMSA-2017-0006.html