Photon OS 3.0: Python3 PHSA-2020-3.0-0118

An update of the python3 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0118. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139045;...

Photon OS 1.0: Envoy PHSA-2020-1.0-0309

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0309. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139048...

Photon OS 1.0: Mysql PHSA-2020-1.0-0309

An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0309. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139049...

Photon OS 2.0: Linux PHSA-2020-2.0-0266

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0266. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139075...

Photon OS 1.0: Python2 PHSA-2020-1.0-0309

An update of the python2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0309. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Troubleshooting Guest Processing Issues | "Test Now" or "Verify network connectivity and credentials"

Article Applicability This article's primary focus is on traditional credentials-based authentication. For environments using a Group Managed Service Account gMSA, please review the User Guide first to ensure you are familiar with all the Requirements and Limitations of gMSA usage. Challenge Skip...

Photon OS 3.0: Apache PHSA-2020-3.0-0116

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0116. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138816;...

Photon OS 2.0: Bindutils PHSA-2020-2.0-0263

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0263. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Apache PHSA-2020-2.0-0263

An update of the apache package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0263. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13881...

Photon OS 3.0: Bindutils PHSA-2020-3.0-0115

An update of the bindutils package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0115. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138817;...

VMware ESXi Use-After-Free / Out-Of-Bounds Access Vulnerability

Several security issues have been identified in the VMware ESIx virtual machine monitor VMM. A use-after-free UAF vulnerability in PVNVRAM, a missing return value check in EHCI USB controller leading to private heap information disclosure, and several out-of-bounds reads. Overview ======= We...

The vulnerability in the virtualization system of VMware Horizon Client, VMware Remote Console, and VMware Fusion allows a malicious individual to elevate their privileges to the root level.

The vulnerability of the virtualization system for VMware Horizon Client, VMware Remote Console, and VMware Fusion relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the client of the VMware Horizon Client, VMware Remote Console, and VMware Workstation virtualization systems for Windows operating systems stems from the improper assignment of permissions to files, allowing an attacker to execute arbitrary code.

The vulnerability of VMware Horizon Client, a virtualization client for workstations, as well as VMware Remote Console and VMware Workstation, when running on Windows operating systems, is related to the improper assignment of permissions to files. Exploiting this vulnerability can allow an...

The vulnerability of the vmnetdhcp service in VMware Fusion and VMware Workstation allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the vmnetdhcp service in VMware Fusion and VMware Workstation lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of VMware Fusion and VMware Workstation, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of VMware Fusion and VMware Workstation lies in their lack of access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerabilities of VMware ESXi, VMware Fusion, and VMware Workstations involve insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerabilities of VMware ESXi, VMware Fusion, and VMware Workstations are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service failures...

The vulnerability of the VMware ESXi hypervisor, related to the lack of protective measures for the website structure, allows attackers to execute a cross-site scripting attack.

The vulnerability of the VMware ESXi hypervisor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

The vulnerability of the openslp hypervisor in the VMware ESXi platform for Horizon DaaS allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the openslp package on the VMware ESXi platform’s Horizon DaaS virtual machine relates to buffer out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of VMware Workspace One’s software lies in authentication process errors, which allow attackers to gain unauthorized access to protected information.

The vulnerability of VMware Workspace One software is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the VMware Tools utility set for Windows operating systems arises from synchronization errors when using shared resources, allowing a malicious individual to gain increased privileges.

The vulnerability of the VMware Tools utility set for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...