VMSA-2019-0020 : Hypervisor-Specific Mitigations for Denial-of-Service and Speculative-Execution Vulnerabilities

a. Hypervisor-Specific Mitigations for Machine Check Error on Page Size Change MCEPSC Denial-of-Service vulnerability - CVE-2018-12207 VMware ESXi, Workstation, and Fusion patches include Hypervisor-Specific Mitigations for Machine Check Error on Page Size Change MCEPSC. A malicious actor with...

Vulnerability Spotlight: Denial-of-service vulnerability in Intel IGC64 graphics driver

Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Intel’s IGC64.dll graphics driver contains a denial-of-service vulnerability. An attacker could exploit this bug by supplying a malformed pixel shader if the graphics driver is operating inside a VMware guest operating...

VMware Workstation e1000 Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

Intel IGC64.DLL shader functionality DCL_INDEXABLE_TEMP denial-of-service vulnerability

Summary An exploitable memory corruption vulnerability exists in Intel’s IGC64.DLL graphics driver, versions 26.20.100.6709 and 26.20.100.6861. A specially crafted pixel shader can cause an out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this...

VMware Workstation and Fusion VMSA-2019-0021 Multiple Security Vulnerabilities

Description VMware Workstation and Fusion are prone to multiple security vulnerabilities. An attacker can leverage these issues to execute arbitrary code in the context of the affected system, gain sensitive information and cause a denial of service condition. The following VMware products are...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review...

Multiple Intel Processors CVE-2018-12207 Denial of Service Vulnerability

Description Multiple Intel Processors are prone to a denial of service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Citrix Hypervisor 8.0 Citrix XenServer 7.0 Citrix XenServer 7.1 LTSR CU2 Citrix XenServer 7.6 Intel 2nd generation...

KLA12121 Multiple vulnerabilities in VMware Workstation and Player

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in the RPC handler can be exploited t...

PT-2019-4012

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.5.1 VMware Fusion versions 11.x before 11.5.1 Description The issue is related to a denial-of-service vulnerability in the RPC handler, which may be exploited by attackers with normal user privileges ...

PT-2019-4010

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.5.1 VMware Fusion versions 11.x before 11.5.1 Description The issue is related to a lack of protection for service data in the VMnetDHCP service of VMware Workstation and VMware Fusion hypervisors...

PT-2019-4011

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.5.1 VMware Fusion versions 11.x before 11.5.1 Description The issue is related to an out-of-bounds write vulnerability in the e1000e virtual network adapter. Successful exploitation of this issue may...

Wild Blue Yonder: VMware Carbon Black ThreatSight Dissects BlueKeep Windows Exploit

VMware Carbon Black’s ThreatSight TS team monitors customer environments to detect and alert on new and emerging threats. Recently, ThreatSight detected malicious behavior that leveraged several attack vectors, including one of the first known uses of the newly released BlueKeep Windows exploit i...

VMSA-2019-0021:VMware Workstation and Fusion updates address multiple security vulnerabilities

VMware Security Advisories Advisory ID| VMSA-2019-0021 ---|--- Advisory Severity| Important CVSSv3 Range| 5.0-8.7 Synopsis| VMware Workstation and Fusion updates address multiple security vulnerabilities CVE-2019-5540, CVE-2019-5541, CVE-2019-5542 Issue Date| 2019-11-12 Updated On| 2019-11-12...

VMSA-2019-0020:VMware ESXi, Workstation, and Fusion patches provide Hypervisor-Specific Mitigations for Speculative-Execution Vulnerabilities

VMware Security Advisories Advisory ID| VMSA-2019-0020 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.5 Synopsis| VMware ESXi, Workstation, and Fusion patches provide Hypervisor-Specific Mitigations for Denial-of-Service and Speculative-Execution Vulnerabilities CVE-2018-12207, CVE-2019-1113...

VMware OT Asset Information

This plugin returns information for a VMware asset in an OT environment. File data ot500019.nasl...

Dell Technologies + VMware Carbon Black: Better Together

It’s been an exciting few months for the VMware Carbon Black team and we’re excited to share some big news with you. Today, from VMworld Europe 2019 in Barcelona, VMware announced an enhanced partnership with Dell Technologies that will make Carbon Black Cloud, along with Dell Trusted Devices and...

VMware Workstation < 15.5.0 Vulnerability (VMSA-2019-0019)

VMware ESXi 6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG, Workstation 15.x before 15.5.0 and Fusion 11.x before 11.5.0 contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privilege...

VMware Fusion < 11.5.0 Vulnerability (VMSA-2019-0019)

VMware ESXi 6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG, Workstation 15.x before 15.5.0 and Fusion 11.x before 11.5.0 contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privilege...

CVE-2019-5049

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This...

CVE-2019-5049

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This...