780 matches found
VMware Fusion SVGA Device Code Execution Vulnerability - Mac OS X
VMware Fusion is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...
VMware Fusion Guest RPC Null Pointer Dereference Vulnerability - Mac OS X
VMware Fusion is prone to a NULL pointer dereference vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion...
Denial of Service Vulnerability in Multiple Vmware Products
VMware ESXi, Workstation, and Fusion are all products of VMware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers; VMware Workstation is a suite of virtual machine software; and Fusion is a suite of virtual machine software that is designed t...
PT-2017-16208
Name of the Vulnerable Software and Affected Versions VMware ESXi versions 6.5 without patch ESXi650-201707101-SG VMware ESXi versions 6.0 without patch ESXi600-201706101-SG VMware ESXi versions 5.5 without patch ESXi550-201709101-SG Workstation versions 12.x before 12.5.3 Fusion versions 8.x...
CVE-2017-4925: NULL Pointer Dereference
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation 12.x before 12.5.3, Fusion 8.x before 8.5.4 contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC request...
PT-2017-16207
Name of the Vulnerable Software and Affected Versions VMware ESXi versions 6.5 without patch ESXi650-201707101-SG VMware Workstation versions 12.x before 12.5.7 VMware Fusion versions 8.x before 8.5.8 Description The issue is an out-of-bounds write vulnerability in the SVGA device, which may allo...
CVE-2017-4924: Out-of-bounds Write
VMware ESXi ESXi 6.5 without patch ESXi650-201707101-SG, Workstation 12.x before 12.5.7 and Fusion 8.x before 8.5.8 contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host...
HashiCorp Vagrant VMware Fusion Plugin Arbitrary Code Execution Vulnerability
HashiCorp Vagrant VMware Fusion plugin is a tool for building and managing virtual machine environments on VMware virtual machines developed by HashiCorp, USA. A security vulnerability exists in HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.24, which stems from the program assignin...
CVE-2017-11741
HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...
Denial of service
HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...
CVE-2017-11741
HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...
CVE-2017-11741
CVE-2017-11741 affects HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) prior to 4.0.24. The issue stems from weak permissions granted to the plugin’s sudo helper scripts, enabling a local attacker to overwrite the scripts and execute arbitrary code with root privileges. Public refe...
CVE-2017-11741
HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...
CVE-2017-11741: Incorrect Default Permissions
HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...
PT-2017-12216
Name of the Vulnerable Software and Affected Versions HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.24 Description The issue allows local users to execute arbitrary code with root privileges by overwriting one of the scripts due to weak permissions for the sudo helper scripts...
HashiCorp Vagrant VMware Fusion Plugin Elevation of Privilege Vulnerability
HashiCorp Vagrant VMware Fusion plugin is a tool for building and managing virtual machine environments on VMware virtual machines developed by HashiCorp, USA. A security vulnerability exists in the sudo helper in HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21. A local attacker...
Hashicorp vagrant-vmware-fusion 4.0.23 Local Root Privilege Escalation
CVE-2017-11741 Local root privesc in Hashicorp vagrant-vmware-fusion = 4.0.23 2 Aug 2017 06:49 A couple of weeks ago I disclosed a local root privesc in Hashicorp's vagrant-vmware-fusion plugin: https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4020.html The...
CVE-2017-7642
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...
Design/Logic Flaw
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...
CVE-2017-7642
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...