The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation lies in synchronization errors when using shared resources (“Race Conditions”), allowing a attacker to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation hypervisors is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code by using a virtual USB controller...

NSX-T vs. NSX-V – Key Differences and Pitfalls to Avoid

Learn the difference between VMware’s segmentation offerings, NSX-T vs NSX-V, and understand the several potential pitfalls that are important to consider before deployment...

Release Notes for Veeam Backup & Replication 9.5 Update 4b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 4b Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prior to...

The vulnerability of the Advanced Linux Sound Architecture component in VMware Workstation allows a hacker to execute arbitrary code.

The vulnerability of the Advanced Linux Sound Architecture ALSA component in VMware Workstation hypervisors is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of VMware Workstation’s virtualization platform, related to errors during DLL file loading, allows attackers to escalate their privileges.

The vulnerability of VMware Workstation’s virtualization platform is related to errors during the loading of DLL files. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...

The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...

The 'Veeam VMware: Datastore Unknown Files Analysis' Monitor Triggers Excessive Alerts

Challenge Situations customers may face that this article covers: The Veeam VMware: Datastore Unknown Files Analysis monitor triggers excessive alerts. The Veeam VMware: Datastore Unknown Files Analysis monitor and the Scan Datastore for Unknown Files Task show different results. The UnknownFiles...

The vulnerability of the central server of the VMware Connection server in the virtualization system of VMware Horizon allows a hacker to gain unauthorized access to protected information.

The vulnerability of the central server of the VMware Connection server in the VMware Horizon workstation virtualization system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms arises from reading data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation virtualization platforms is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Photon OS 1.0: Binutils PHSA-2019-1.0-0242

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libseccomp PHSA-2019-3.0-0009

An update of the libseccomp package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126376;...

VMware Releases Security Advisory for Multiple Products

VMware has released a security advisory to address vulnerabilities affecting multiple products. An attacker could exploit these vulnerabilities to cause a denial-of-service condition. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the VMwar...

VMware product updates address Linux kernel vulnerabilities in TCP Selective Acknowledgement (SACK) (CVE-2019-11477, CVE-2019-11478)

3. Linux kernel vulnerabilities in TCP Selective Acknowledgement SACK CVE-2019-11477, CVE-2019-11478 CVE-2019-11477 - SACK Panic - A sequence of SACKs may be crafted such that one can trigger an integer overflow, leading to a kernel panic. VMware has evaluated the severity of this issue to be in...

VMSA-2019-0010:VMware product updates address Linux kernel vulnerabilities in TCP Selective Acknowledgement (SACK)

VMware Security Advisories Advisory ID| VMSA-2019-0010.3 ---|--- Advisory Severity| Important CVSSv3 Range| 5.3 - 7.5 Synopsis| VMware product updates address Linux kernel vulnerabilities in TCP Selective Acknowledgement SACK CVE-2019-11477, CVE-2019-11478 Issue Date| 2019-07-02 Updated On|...

Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)

Summary Multiple vulnerabilities in Open Source VMware affects IBM PureApplication System. IBM PureApplication System has addressed Common Vulnerabilities Exposures CVE-2017-4903, CVE-2017-4904, CVE-2017-4905. Additionally this bulletin includes information about the release of fix for Common...

Photon OS 2.0: Docker PHSA-2019-2.0-0162

An update of the docker package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0162. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12620...

Photon OS 1.0: Zookeeper PHSA-2019-1.0-0237

An update of the zookeeper package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0237. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Dhcp PHSA-2019-2.0-0152

An update of the dhcp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0152. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126213;...

Photon OS 2.0: Sqlite PHSA-2019-2.0-0162

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0162. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12621...