VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

PT-2020-4415 · Vmware · Vmware Nsx-T

Name of the Vulnerable Software and Affected Versions: VMware NSX-T versions 3.x before 3.0.2 VMware NSX-T versions 2.5.x before 2.5.2.2.0 Description: The issue exists in the way VMware NSX-T allows a KVM host to download and install packages from NSX manager. A malicious actor with MITM...

VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware ESXi. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SLP messages. The issue results from the lack of validating the existence ...

VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities (CVE-2020-3981, CVE-2020-3982, CVE-2020-3992, CVE-2020-3993, CVE-2020-3994, CVE-2020-3995)

3a. ESXi OpenSLP remote code execution vulnerability CVE-2020-3992 OpenSLP as used in ESXi has a use-after-free issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. 3b. NSX-T MITM vulnerability CVE-2020-3993 VMware...

Photon OS 3.0: Linux PHSA-2020-3.0-0153

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141496;...

Photon OS 3.0: Icu PHSA-2020-3.0-0153

An update of the icu package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141495; scriptversion"1.6...

VMware vCenter File Disclosure

File disclosure vulnerability in VMware vCenter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

VMSA-2020-0023:VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0023.3 CVSSv3 Range: 5.9 - 9.8 Issue Date:2020-10-20 Updated On: 2020-11-24 CVEs: CVE-2020-3981, CVE-2020-3982, CVE-2020-3992, CVE-2020-3993, CVE-2020-3994, CVE-2020-3995 Synopsis: VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities...

CVE-2020-3991

VMware Horizon Client for Windows 5.x before 5.5.0 contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at...

Denial of service

VMware Horizon Client for Windows 5.x before 5.5.0 contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at...

CVE-2020-3991

The CVE-2020-3991 entry affects VMware Horizon Client for Windows (5.x before 5.5.0). The vulnerability is a denial-of-service caused by a file system access control issue during install time, where an unauthenticated local attacker could use a symbolic link to overwrite certain admin-privileged ...

CVE-2020-3991

VMware Horizon Client for Windows 5.x before 5.5.0 contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at...

Photon OS 3.0: Nodejs PHSA-2020-3.0-0150

An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0150. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14148...

Photon OS 1.0: Linux PHSA-2020-1.0-0333

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0333. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141480...

Photon OS 2.0: Python3 PHSA-2020-2.0-0289

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Horizon Client update addresses a denial-of-service vulnerability (CVE-2020-3991)

3. File system access control denial-of-service vulnerability CVE-2020-3991 VMware Horizon Client for Windows contains a denial-of-service vulnerability due to a file system access control issue during install time. VMware has evaluated the severity of this issue to be in the Moderate severity...

PT-2020-4398

Name of the Vulnerable Software and Affected Versions: VMware ESXi versions 7.0 before ESXi 7.0.1-0.0.16850804 VMware ESXi versions 6.7 before ESXi670-202010401-SG VMware ESXi versions 6.5 before ESXi650-202010401-SG Description: The issue is related to a use-after-free problem in the OpenSLP...

Photon OS 2.0: Icu PHSA-2020-2.0-0288

An update of the icu package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0288. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141442;...

Photon OS 1.0: Gnutls PHSA-2020-1.0-0330

An update of the gnutls package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0330. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14144...

Photon OS 1.0: Linux PHSA-2020-1.0-0330

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0330. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141439...