ESXi 6.5 / 6.7 / 7.0 DoS (VMSA-2020-0018)

The remote VMware ESXi host is version 6.5, 6.7 or 7.0 and is affected by a denial of service DoS vulnerability in the authentication service. An unauthenticated, remote attacker can exploit this issue to exhaust memory resources resulting in a degradation of performance condition while the attac...

CVE-2020-3976

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

The vulnerability of the openslp hypervisor in the VMware ESXi platform for Horizon DaaS allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the openslp package on the VMware ESXi platform’s Horizon DaaS virtual machine relates to buffer out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of microprogramming software for managing video cards (motherboards) in hypervisors such as VMware ESXi, VMware Workstation, and VMware Fusion allows attackers to cause partial service interruptions.

The vulnerability of microprogramming software for managing video cards controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a partial service...

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion arises from buffer overflows in dynamic memory during the processing of SVGA3D commands. This allows attackers to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion lies in buffer overflows in the dynamic memory during the processing of SVGA3D commands. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability in the virtual network adapter vmxnet3 of VMware ESXi, VMware Workstation, and VMware Fusion allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the virtual network adapter vmxnet3 in VMware ESXi, VMware Workstation, and VMware Fusion lies in the issue of data writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the USB 2.0 controller EHCI in VMware ESXi, VMware Workstation, and VMware Fusion allows a attacker to execute arbitrary code.

The vulnerability of the USB 2.0 controller EHCI in VMware ESXi, VMware Workstation, and VMware Fusion lies in the writing of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the PVNVRAM component in VMware ESXi, VMware Workstation, and VMware Fusion occurs due to the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PVNVRAM component in VMware ESXi, VMware Workstation, and VMware Fusion lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the USB 3.0 (xHCI) controller in VMware ESXi, VMware Workstation, and VMware Fusion allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the USB 3.0 xHCI controller in VMware ESXi, VMware Workstation, and VMware Fusion lies in the writing of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Multiple VMware Products Competitive Conditions Issue Vulnerability

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Buffer Overflow Vulnerability in Multiple VMware Products (CNVD-2021-24362)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Unspecified Vulnerability in Multiple VMware Products

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Buffer Overflow Vulnerability in Multiple VMware Products (CNVD-2021-24363)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Buffer Overflow Vulnerability in Multiple VMware Products (CNVD-2021-24364)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Multiple VMware Products Resource Management Error Vulnerability (CNVD-2021-24356)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Information Disclosure Vulnerability in Multiple VMware Products (CNVD-2021-24359)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Multiple VMware Products Resource Management Error Vulnerability

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

Buffer Overflow Vulnerability in Multiple VMware Products (CNVD-2021-24361)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

CVE-2020-3967

VMware ESXi 7.0 before ESXi7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5 contain a heap-overflow vulnerability in the USB 2.0 controller EHCI. A malicious actor with local access to a virtual...

CVE-2020-3966

VMware ESXi 7.0 before ESXi7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG, Workstation 15.x before 15.5.2, and Fusion 11.x before 11.5.2 contain a heap-overflow due to a race condition issue in the USB 2.0 controller EHCI. A malicious actor with local...