VMware VCenter Server file upload

Added: 02/25/2021 Background VMware VCenter Server is server management software for controlling VMware VSphere environments. Problem A vulnerability in VMware VCenter Server allows remote, unauthenticated attackers to upload files to arbitrary locations on the server, leading to command executio...

ESXi 7.0 DoS (VMSA-2020-0029)

According to its self-reported version number, the remote VMware ESXi host is version 7.0. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx...

VMware Workstation 15.x < 15.5.7 DoS (VMSA-2020-0029)

The version of VMware Workstation installed on the remote host is 15.x prior to 15.5.7. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx...

VMware Workspace One Access / VMware Identity Manager Command Injection Vulnerability (VMSA-2020-0027)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by a unspecified command injection vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version. C Tenable...

VMware Workstation 15.x < 15.5.7 Use-after-free (VMSA-2020-0026)

The version of VMware Workstation installed on the remote Windows host is 15.x prior to 15.5.7. It is, therefore, affected by a use-after-free error in the XHCI USB Controller. An unauthenticated, local attacker with administrative privileges on a virtual machine may exploit this issue to execute...

VMware Fusion 11.x < 11.5.7 Use-after-free (VMSA-2020-0026)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.7. It is, therefore, affected by a use-after-free error in the XHCI USB Controller. An unauthenticated, local attacker with administrative privileges on a virtual machine may exploit this issue to...

KLA12101 Use after free vulnerability in VMware Workstation and Player

A use after free vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories VMSA-2020-0026 Related products VMware-Workstation VMware-Player CVE list CVE-2020-4004 critical Solution Update to the latest...

VMware Horizon View Client < 5.4.4 Multiple Vulnerabilities (VMSA-2020-0020)

The version of VMware Horizon Client for Windows installed on the remote host is less than 5.4.4. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A...

VMware Fusion 11.x < 11.5.7 Privilege Escalation (VMSA-2020-0020)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x. It is, therefore, affected by a privilege escalation vulnerability due to the way it allows configuring the system wide path. An authenticated, local attacker with normal user privileges can exploit this issue to...

VMSA-2020-0018 : VMware ESXi, vCenter Server, and Cloud Foundation updates address a partial denial of service vulnerability

a. Partial denial of service vulnerability via authentication services CVE-2020-3976 VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. A malicious actor with network access to ESXi or vCenter may be able to exploit this...

VMware Horizon View Client 5.x < 5.4.3 Privilege Escalation (VMSA-2020-0017) (macOS)

The version of VMware Horizon View Client installed on the remote macOS or Mac OS X host is 5.x prior to 5.4.3. It is, therefore, affected by a privilege escalation vulnerability in the service startup script due to improper XPC Client validation. A local attacker with normal user privileges can...

VMware Horizon View Client < 5.4.3 Privilege Escalation Vulnerability (VMSA-2020-0013)

The version of VMware Horizon View Client installed on the remote Windows host is prior to 5.4.3. It is, therefore, affected by a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local authenticated attacker can exploit this issue to run...

VMware Workstation 15.x < 15.1.0 / 15.x < 15.5.2 Multiple Vulnerabilities (VMSA-2020-0011)

The version of VMware Workstation installed on the remote Windows host is 15.x prior to 15.1.0 or 15.x prior to 15.5.2. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...

VMware Fusion 11.x < 11.5.5 Multiple Vulnerabilities (VMSA-2020-0011)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.5. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. C Tenable...

VMware Cloud Director 9.1.x < 9.1.0.4 / 9.5.x < 9.5.0.6 / 9.7.x < 9.7.0.5 / 10.0.x < 10.0.0.2 Code Injection (VMSA-2020-0010)

The version of VMware vCloud Director installed on the remote host is 9.1.x prior to 9.1.0.4, 9.5.x prior to 9.5.0.6, 9.7.x prior to 9.7.0.5, or 10.0.x prior to 10.0.0.2. It is, therefore, affected by a code injection vulnerability due to a failure to properly handle input. A remote, authenticate...

VMware Workstation 15.0.x < 15.5.2 Cortado Thinprint DoS (VMSA-2020-0005)

The version of VMware Workstation installed on the remote Windows host is 15.0.x prior to 15.5.2. It is, therefore, affected by a flaw related to Cortado Thinprint and virtual printing that allows an attacker to overflow the heap leading to denial of service conditions. Note that Nessus has not...

VMware ESXi 5.5 / 6.0 / 6.5 / 6.7 DoS (VMSA-2018-0018) (remote check)

The remote VMware ESXi host is version 5.5, 6.0, 6.5, or 6.7 and is missing a security patch. It is, therefore, vulnerable to a denial of service vulnerability. The vulnerability exists in the RPC handler due to a NULL pointer dereference issue. An authenticated, remote attacker can exploit this...

KLA12095 DoS vulnerability in VMWare Workstation and Player

A denial of service vulnerability was found in VMWare Workstation and Player. Malicious users can exploit this vulnerability to cause denial of service. Original advisories VMSA-2020-0005 Related products VMware-Workstation VMware-Player CVE list CVE-2020-3951 warning Solution Update to the lates...

VMware Fusion 11.x < 11.5.2 Multiple Vulnerabilities (VMSA-2020-0004)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.2. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. C Tenable...

VMware Workstation 15.0.x < 15.5.2 Multiple Vulnerabilities (VMSA-2020-0004)

The version of VMware Workstation installed on the remote Windows host is 15.0.x prior to 15.5.2. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. C Tenable Netwo...