VMware ESXi product updates address multiple important security issues (VMSA-2016-0010) - Remote Version Check

ESXi contain an HTTP header injection vulnerability due to lack of input validation. An attacker can exploit this issue to set arbitrary HTTP response headers and cookies, which may allow for cross-site scripting and malicious redirect attacks. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...

VMware ESXi product updates address multiple important security issues (VMSA-2016-0010) - Local Version Check

ESXi contain an HTTP header injection vulnerability due to lack of input validation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the VMware ESXi hypervisor allows a malicious individual to increase their privileges in the guest operating system or cause a service failure.

The vulnerability of VMware ESXi allows a malicious actor operating on the guest OS Windows 8.1 to trigger a service failure in the guest OS or increase their privileges...

The vulnerability of VMWare Workstation’s software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in VMware Workstation, VMware Player, VMware Fusion, VMware ESXi, and VMware ESX allows users of these guest operating systems to trigger a service failure VMX process crash by using an invalid port...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0016) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - bind - expat - nspr and nss - python - vSphere API %NASLMINLEVEL 7030...

VMware ESXi updates address a critical glibc security vulnerability (VMSA-2016-0002) - Remote Version Check

VMware ESXi updates address a critical glibc security vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

ESXi 5.5 < Build 3568722 / 6.0 < Build 3568940 glibc DNS Resolver RCE (VMSA-2016-0002) (remote check)

The remote VMware ESXi host is 5.5 prior to build 3568722 or 6.0 prior to build 3568940. It is, therefore, affected by a stack-based buffer overflow condition in the GNU C Library glibc DNS client-side resolver due to improper validation of user-supplied input when looking up names via the...

ESXi 6.0 < Build 3380124 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)

The remote VMware ESXi 6.0 host is prior to build 3380124. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt memory, resulting in an elevation ...

ESXi 5.0 < Build 3086167 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)

The remote VMware ESXi 5.0 host is prior to build 3086167. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt memory, resulting in an elevation ...

ESXi 5.1 < Build 3070626 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)

The remote VMware ESXi 5.1 host is prior to build 3070626. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt memory, resulting in an elevation ...

ESXi 5.5 < Build 3248547 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (remote check)

The remote VMware ESXi 5.5 host is prior to build 3248547. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt memory, resulting in an elevation ...

VMware ESXi updates address important guest privilege escalation vulnerability (VMSA-2016-0001)

VMware ESXi updates address important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6933

CVE-2015-6933 affects VMware Tools HGFS across VMware Workstation (11.x prior to 11.1.2), VMware Player (7.x prior to 7.1.2), VMware Fusion (7.x prior to 7.1.2), and VMware ESXi (5.0–6.0). Root cause: HGFS/shared folders component vulnerability leading to guest OS privilege escalation or guest ke...

VMware ESXi Multiple OpenSSL Vulnerabilities (VMSA-2014-0006)

The remote VMware ESXi host is affected by multiple vulnerabilities in the OpenSSL third-party library : - A use-after-free error exists in the ssl3readbytes function in file ssl/s3pkt.c that is triggered when a second read is done to the function by multiple threads when SSLMODERELEASEBUFFERS is...

VMware ESXi Multiple DoS (VMSA-2014-0008)

The remote ESXi host is affected by multiple denial of service vulnerabilities in the glibc library : - A buffer overflow condition exists in the extendbuffers function in file posix/regexec.c due to improper validation of user-supplied input when handling multibyte characters in a regular...

VMware ESXi Multiple OpenSSL Vulnerabilities (VMSA-2014-0004) (Heartbleed)

The remote VMware ESXi host is affected by multiple vulnerabilities in the OpenSSL third-party library : - A flaw exist in the Elliptic Curve Digital Signature Algorithm ECDSA implementation due to a failure to ensure that certain swap operations have a constant-time behavior. An attacker can...

VMware ESXi Tools Guest OS Privilege Escalation (VMSA-2014-0005)

The remote VMware ESXi host is affected by a privilege escalation vulnerability due to a NULL pointer dereference flaw in VMware Tools running on Microsoft Windows 8.1. An attacker on an adjacent network can exploit this issue to gain elevated privileges within the guest operating system or else...

VMware ESXi 5.5 < Build 3029944 OpenSLP RCE (VMSA-2015-0007)

The remote VMware ESXi host is version 5.5 prior to build 3029944. It is, therefore, affected by a remote code execution vulnerability due to a double-free error in the SLPDProcessMessage function in OpenSLP. An unauthenticated, remote attacker can exploit this, via a crafted package, to execute...

VMware ESXi 5.1 < Build 3021178 OpenSLP RCE (VMSA-2015-0007)

The remote VMware ESXi host is version 5.1 prior to build 3021178. It is, therefore, affected by a remote code execution vulnerability due to a double-free error in the SLPDProcessMessage function in OpenSLP. An unauthenticated, remote attacker can exploit this, via a crafted package, to execute...