CVE-2019-5540

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process...

CVE-2019-5540

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process...

Design/Logic Flaw

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM...

Information disclosure

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process...

Out-of-bounds

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain an out-of-bounds write vulnerability in the e1000e virtual network adapter. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service...

Active C2 Discovery Using Protocol Emulation Part1 (HYDSEVEN NetWire)

Malware C2 addresses can be an important IOC to detect known threats. In order to obtain C2 information, we first need malware samples which are then analyzed dynamically or statically. However the analysis task is often times not straightforward. Increasingly anti-analysis methods are implemente...

CVE-2019-5542

CVE-2019-5542 affects VMware Workstation 15.x (before 15.5.1) and VMware Fusion 11.x (before 11.5.1). It is a denial‑of‑service vulnerability in the RPC handler that can be exploited by a user with normal privileges to cause a DoS on their own VM. VMware provides fixed versions: Workstation 15.5....

CVE-2019-5542

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM...

CVE-2019-5541

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain an out-of-bounds write vulnerability in the e1000e virtual network adapter. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service...

CVE-2019-5541

CVE-2019-5541 describes an out-of-bounds write in the e1000e virtual network adapter affecting VMware Workstation 15.x before 15.5.1 and VMware Fusion 11.x before 11.5.1. The root cause is improper handling in the e1000e device, enabling potential host code execution from the guest or a denial-of...

CVE-2019-5540

VMware Workstation 15.x before 15.5.1 and Fusion 11.x before 11.5.1 contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process...

CVE-2019-5540

CVE-2019-5540 affects VMware Workstation (15.x earlier than 15.5.1) and VMware Fusion (11.x earlier than 11.5.1). The vulnerability is an information disclosure in the vmnetdhcp component that can allow a guest VM attacker to leak memory from the host process, exposing sensitive information. Acco...

VMware Workstation 15.0.x < 15.5.1 Multiple Vulnerabilities (VMSA-2019-0020, VMSA-2019-0021)

The version of VMware Workstation installed on the remote Windows host is 15.0.x prior to 15.5.1. It is, therefore, affected by multiple vulnerabilities: - An unspecified information disclosure vulnerability in vmnetdhcp. CVE-2019-5540 - An unspecified out-of-bounds write vulnerability in the...

VMware Fusion 11.0.x < 11.5.1 Multiple Vulnerabilities (VMSA-2019-0020, VMSA-2019-0021)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.1. It is, therefore, affected by multiple vulnerabilities: - An unspecified information disclosure vulnerability in vmnetdhcp. CVE-2019-5540 - An unspecified out-of-bounds write vulnerability in th...

Tianfu Cup Round-Up: Safari, Chrome, D-Link Routers and Office 365 Successfully Hacked

Hackers over the weekend successfully compromised widely used software and hardware–including browsers Safari and Chrome, D-Link routers and the Office 365 suite–using zero-day vulnerabilities at the annual Tianfu Cup gathering. The hacking competition, held in Chengdu, China, is very similar to...

Photon OS 2.0: Git PHSA-2019-2.0-0185

An update of the git package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0185. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid131125;...

Storefront: Issue with creating new deployment - "Unable to Create Deployment"

1. Unable to create StoreFront Deployment on a VM hosted on VMware with VMware tools installed Exception: New Server Deployment An error occurred running the command: 'Set-DSNewClusterEnvironment' An error occurred while adding the StoreFront configuration API. Exception of type...

VMSA-2019-0020 : Hypervisor-Specific Mitigations for Denial-of-Service and Speculative-Execution Vulnerabilities

a. Hypervisor-Specific Mitigations for Machine Check Error on Page Size Change MCEPSC Denial-of-Service vulnerability - CVE-2018-12207 VMware ESXi, Workstation, and Fusion patches include Hypervisor-Specific Mitigations for Machine Check Error on Page Size Change MCEPSC. A malicious actor with...

Vulnerability Spotlight: Denial-of-service vulnerability in Intel IGC64 graphics driver

Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Intel’s IGC64.dll graphics driver contains a denial-of-service vulnerability. An attacker could exploit this bug by supplying a malformed pixel shader if the graphics driver is operating inside a VMware guest operating...

VMware Workstation e1000 Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...