The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion allows a hacker to trigger a service failure.

The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

VMSA-2019-0022 : VMware ESXi updates address OpenSLP remote code execution vulnerability

VMware ESXi updates address OpenSLP remote code execution vulnerability CVE-2019-5544 OpenSLP as used in ESXi has a heap overwrite issue. A malicious actor with network access to port 427 on an ESXi host may be able to overwrite the heap of the OpenSLP service resulting in remote code execution. ...

Threat Analysis Unit (TAU) Threat Intelligence Notification: Tick Downloaders (Operation ENDTRADE)

Trend Micro released a white paper about Tick, a Chinese cyberespionage threat actor targeting east asian countries. The report details several new downloader malware families. VMware Carbon Black Threat Analysis Unit TAU reviewed the malware and is providing product rules to detect and identify...

The vulnerability of the e1000e virtual network adapter allows attackers to execute arbitrary code or cause system failures in VMware Workstation and VMware Fusion hypervisors.

The vulnerability of the e1000e virtual network adapter in VMware Workstation and VMware Fusion lies in the fact that data is written beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the RPC call handlers of VMware Workstation and VMware Fusion hypervisors allows a attacker to cause a service failure.

The vulnerability of RPC call handlers in VMware Workstation and VMware Fusion hypervisors is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

VMware ESXi and VMware Horizon DaaS OpenSLP Buffer Overflow Vulnerability

VMware ESXi and VMware Horizon DaaS are both products of VMware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers.VMware Horizon DaaS is a suite of virtual desktop platforms built for delivering desktops and applications as a cloud computing...

Debian DLA-2025-1 : openslp-dfsg security update

The OpenSLP package had two open security issues : CVE-2017-17833 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial of service or a remote code-execution vulnerability. CVE-2019-5544 OpenSLP as used in ESXi and t...

CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

Heap overflow

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

OpenSLP CVE-2019-5544 Heap Memory Corruption Vulnerability

Description OpenSLP is prone to a heap-memory-corruption vulnerability. An attacker can exploit this issue to crash the affected application or execute arbitrary code within the context of the affected application. OpenSLP 1.2.1 and 2.0.0 are vulnerable; other versions may also be affected...

VMware Releases Security Updates for ESXi and Horizon DaaS

VMware has released security updates to address a vulnerability in ESXi and Horizon DaaS. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware Security...

Photon OS 2.0: Dhcp PHSA-2019-2.0-0192

An update of the dhcp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0192. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid131763;...

CVE-2019-5098

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

CVE-2019-5098

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

Out-of-bounds

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

CVE-2019-5098

CVE-2019-5098 is an exploitable out-of-bounds read in the AMD ATI Radeon ATIDXX64.DLL shader path (version 26.20.13001.29010). A malformed pixel shader within a VMware guest can trigger an out-of-bounds memory read, potentially impacting the VM host process (vmware-vmx.exe). Technical details fro...

CVE-2019-5098

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...