Photon OS 3.0: Linux PHSA-2019-3.0-0028

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0028. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid129679;...

ESXi 6.0 / 6.5 / 6.7 Use-After-Free (VMSA-2019-0014)

The remote VMware ESXi host is version 6.0, 6.5 or 6.7 and is affected by a use-after-free error in the virtual sound device that allows a local attacker on the guest machine with low privileges to execute code on the host. Note that Nessus has not tested for this issue but has instead relied onl...

VMware vCenter Server 6.0 / 6.5 / 6.7 Multiple Vulnerabilities (VMSA-2019-0013)

The version of VMware vCenter Server installed on the remote host is 6.0 prior to U3j, 6.5 prior to U3, or 6.7 prior to U3, and is, therefore, affected by the following vulnerabilities: - An information disclosure vulnerability caused by insufficient session expiration. This allows an attacker wi...

VMware Fusion 11.0.x < 11.5.0 Multiple Vulnerabilities (VMSA-2019-0014)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.0. It is, therefore, affected by the following issues: - A use-after-free error in the virtual sound device that allows a local attacker on the guest machine with low privileges to execute code on...

VMware Horizon View Client 5.x < 5.2.0 Use-After-Free (VMSA-2019-0014)

The version of VMware Horizon View Client installed on the remote host is 5.x prior to 5.2.0. It is, therefore, affected by a use-after-free error in the virtual sound device that allows a local attacker on the guest machine with low privileges to execute code on the host. Note that Nessus has no...

VMware Workstation 15.0.x < 15.5.0 Multiple Vulnerabilities (VMSA-2019-0014)

The version of VMware Workstation installed on the remote host is 15.0.x prior to 15.5.0. It is, therefore, affected by the following issues: - A use-after-free error in the virtual sound device that allows a local attacker on the guest machine with low privileges to execute code on the host...

ESXi 6.0 / 6.5 / 6.7 Multiple Vulnerabilities (VMSA-2019-0013)

The remote VMware ESXi host is version 6.0, 6.5 or 6.7 and is affected the following vulnerabilities: - A remote code execution vulnerability caused by a failure to sanitize filenames in the tab autocomplete feature of BusyBox. This allows an attacker to execute arbitrary code, write arbitrary...

App Layering 1908: Getting "User is missing the following required permission: Virtual machine / Inventory / Remove" while configuring VMWare connector".

We get error"User is missing the following required permission: Virtual machine / Inventory / Remove" while configuring VMWare connector"...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in Cloud Foundation and Harbor Container Registry for Pivotal Cloud Foundry. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA...

Photon OS 1.0: Linux PHSA-2019-1.0-0251

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid129293...

VMSA-2019-0014 : Use-after-free vulnerability

ESXi use-after-free vulnerability - CVE-2019-5527 ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. A local attacker with non-administrative access on the guest machine may exploit this issue to execute code on the host. This...

Photon OS 3.0: Mysql PHSA-2019-3.0-0026

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid129103...

Photon OS 3.0: Python3 PHSA-2019-3.0-0030

An update of the python3 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0030. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid129164;...

VMSA-2019-0015:VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0015 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability CVE-2019-16097 Issue Date| 2019-09-24 Updated On|...

CVE-2019-5521

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6 and Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this...

CVE-2019-5521

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6 and Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this...

Out-of-bounds

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6 and Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this...

CVE-2019-5521

VMware ESXi 6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001, Workstation 15.x before 15.0.3 and 14.x before 14.1.6 and Fusion 11.x before 11.0.3 and 10.x before 10.1.6 contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this...

CVE-2019-5521

CVE-2019-5521 is an out-of-bounds read vulnerability in VMware's pixel shader pipeline affecting ESXi, Workstation, and Fusion. Exploitation requires access to a VM with 3D graphics enabled and can lead to information disclosure or a host DoS; ESXi mitigations are not enabled by default, while Wo...

VMware Releases Security Updates for Multiple Products

VMware has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMwar...