Photon OS 1.0: Nss PHSA-2021-1.0-0404

An update of the nss package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0404. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

Photon OS 2.0: Zeromq PHSA-2021-2.0-0357

An update of the zeromq package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0357. The text itself is copyright C VMware, Inc...

Photon OS 2.0: Libjpeg PHSA-2021-2.0-0358

An update of the libjpeg package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0358. The text itself is copyright C VMware, Inc...

Photon OS 2.0: Zookeeper PHSA-2021-2.0-0358

An update of the zookeeper package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0358. The text itself is copyright C VMware, Inc...

Photon OS 3.0: Linux PHSA-2021-3.0-0254

An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0254. The text itself is copyright C VMware, Inc...

Photon OS 3.0: Nss PHSA-2021-3.0-0254

An update of the nss package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0254. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Photon OS 2.0: Nss PHSA-2021-2.0-0358

An update of the nss package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0358. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

Photon OS 4.0: Go PHSA-2021-4.0-0046

An update of the go package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0046. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2021-4.0-0047

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0047. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

VMSA-2021-0013:VMware Tools, VMRC and VMware App Volumes update addresses a local privilege escalation vulnerability

Advisory ID: VMSA-2021-0013 CVSSv3 Range: 7.8 Issue Date:2021-06-22 Updated On: 2021-06-22 Initial Advisory CVEs: CVE-2021-21999 Synopsis: VMware Tools, VMRC and VMware App Volumes update addresses a local privilege escalation vulnerability CVE-2021-21999 RSS Feed Download PDF Download Text File...

CVE-2021-21997

VMware Tools for Windows 11.x.y prior to 11.3.0 contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...

CVE-2021-21997

VMware Tools for Windows 11.x.y prior to 11.3.0 contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...

Denial of service

VMware Tools for Windows 11.x.y prior to 11.3.0 contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...

CVE-2021-21997

VMware Tools for Windows 11.x.y prior to 11.3.0 contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...

CVE-2021-21997

VMware Tools for Windows 11.x.y prior to 11.3.0 contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...

CVE-2021-21997

CVE-2021-21997 affects VMware Tools for Windows prior to 11.3.0, where the VM3DMP driver canPANIC under local-privileged execution in the Windows guest, causing a denial-of-service condition. Affected product: VMware Tools for Windows (11.x.y and earlier). Root cause: vulnerability in VM3DMP driv...

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

CVE-2021-3608

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The...

CVE-2021-21997: Undefined Security Weakness

VMware Tools for Windows 11.x.y prior to 11.3.0 contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a...

CVE-2021-3607

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a lar...