VMSA-2020-0004:VMware Horizon Client, VMRC, VMware Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities

Advisory ID: VMSA-2020-0004.1 CVSSv3 Range: 7.3-9.3 Issue Date:2020-03-12 Updated On: 2020-03-14 CVEs: CVE-2019-5543, CVE-2020-3947 , CVE-2020-3948 Synopsis: VMware Horizon Client, VMRC, VMware Workstation and Fusion updates address use-after-free and privilege escalation vulnerabilities...

See the Advantages of Intrinsic Security | Join the Webinar Next Week

At VMware Carbon Black, we’re excited to continue exploring our approach to Intrinsic Security. What what does “intrinsic security” mean, and how does it help enhance and support an organization’s existing security stack? Truly, there has never been a more challenging nor exciting time in...

Photon OS 2.0: Envoy PHSA-2020-2.0-0207

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133687...

Photon OS 1.0: Python3 PHSA-2020-1.0-0276

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0276. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Carbon Black TAU: Ryuk Ransomware Technical Analysis

Ryuk Ransomware has been crippling both the public and private sector recently with the ability to disrupt its target environment. The ransomware will typically be dropped by an already compromised system that has been infected by Trickbot or Emotet through a phishing email. Once the Ryuk payload...

vmware_escape

This is a VMware Escape Exploit targeting VMware WorkStation 12.5.5. The exploit is designed to escape the sandbox environment and execute arbitrary code on the host system. The exploit is likely to be a heap overflow vulnerability, which is a type of buffer overflow attack that occurs when a...

KLA12102 DoS vulnerability in VMware Workstation and Player

A denial of service vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to cause denial of service. Original advisories VMSA-2020-0029 Exploitation Related products VMware-Workstation VMware-Player CVE list CVE-2020-3999 high Solution Update to...

Photon OS 3.0: Sqlite PHSA-2020-3.0-0055

An update of the sqlite package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0055. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133506;...

Photon OS 3.0: Libarchive PHSA-2020-3.0-0055

An update of the libarchive package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0055. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133504;...

Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection

!/usr/bin/python """ Cisco Data Center Network Manager LanFabricImpl createLanFabric Command Injection Remote Code Execution Vulnerability Tested on: Cisco DCNM 11.2.1 ISO Virtual Appliance for VMWare, KVM and Bare-metal servers - Release: 11.21 - Release Date: 05-Jun-2019 - FileName:...

Photon OS 3.0: Nxtgn PHSA-2020-3.0-0054

An update of the nxtgn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0054. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133498...

Photon OS 2.0: Sqlite PHSA-2020-2.0-0204

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0204. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13350...

Photon OS 1.0: Xerces PHSA-2020-1.0-0271

An update of the xerces package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13350...

Photon OS 2.0: Nxtgn PHSA-2020-2.0-0204

An update of the nxtgn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0204. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133499...

Photon OS 1.0: Cpio PHSA-2020-1.0-0267

An update of the cpio package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0267. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133302;...

Photon OS 1.0: Glibc PHSA-2019-1.0-0209

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0209. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133298...

Photon OS 1.0: Elasticsearch PHSA-2019-1.0-0209

An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0209. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Kibana PHSA-2019-1.0-0209

An update of the kibana package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0209. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13329...

Photon OS 2.0: Envoy PHSA-2020-2.0-0202

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0202. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133263...

Photon OS 3.0: Openssh PHSA-2019-3.0-0045

An update of the openssh package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0045. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...