The vulnerability of the VMware Carbon Black Cloud for MacOS installer relates to memory object processing errors, which allows an attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the VMware Carbon Black Cloud for MacOS installer is related to errors in memory object processing. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of VMware ESXi, VMware Workstation, VMware Fusion, and VMware Cloud Foundation, related to the manipulation of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerabilities of VMware ESXi, VMware Workstation, VMware Fusion, and VMware Cloud Foundation are related to the handling of the zero pointer. Exploiting these vulnerabilities can allow attackers to trigger service failures...

Photon OS 3.0: Linux PHSA-2021-3.0-0182

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0182. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144902;...

Photon OS 2.0: Linux PHSA-2021-2.0-0310

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0310. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144898...

VMware Workstation 16 Pro suffers from dll hijacking vulnerability

VMware Workstation Chinese name "威睿工作站" is a desktop virtual computer software. A dll hijacking vulnerability exists in VMware Workstation 16 Pro. An attacker can exploit this vulnerability to execute malicious code...

VMware Fusion 11.x < 11.5.7 DoS (VMSA-2020-0029)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.7. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual...

VMware Workstation 15.x < 15.5.7 DoS (VMSA-2020-0029)

The version of VMware Workstation installed on the remote host is 15.x prior to 15.5.7. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx...

MTN Group: 2x Remote file inclusion within your VMware Instances

Summary: 2x Remote file inclusion within your VMware Instances Hosts: nmc.vc.mtn.co.ug h28a.n1.ips.mtn.co.ug Steps To Reproduce: Navigate to the URLs given below, /etc/passwd will be displayed. https://nmc.vc.mtn.co.ug/eam/vib?id=/etc/passwd https://h28a.n1.ips.mtn.co.ug/eam/vib?id=/etc/passwd...

Enterprise EDR Expands New Linux Coverage to SUSE, OpenSUSE, Ubuntu, Oracle & Amazon Linux

VMware Carbon Black is pleased to announce an exciting expansion of Linux distribution coverage for Enterprise EDR users on the VMware Carbon Black Cloud platform. In addition to the current support of Windows, macOS, Red Hat Enterprise Linux RHEL, CentOS, and Oracle, this release further expands...

Announcing the General Availability of Container Security in the VMware Carbon Black Cloud

Today, we are excited to announce the first release of Container Security capabilities in the Carbon Black Cloud. Building on our Cloud Workload Protection solution announced at VMworld, our new Container Security offering supports VMware’s Intrinsic Security vision to protect data and applicatio...

Photon OS 1.0: Linux PHSA-2020-1.0-0350

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0350. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144519...

Photon OS 3.0: Linux PHSA-2020-3.0-0177

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0177. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144514;...

Photon OS 3.0: Openldap PHSA-2020-3.0-0180

An update of the openldap package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0180. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144515;...

Photon OS 3.0: Cassandra PHSA-2020-3.0-0179

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0179. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Cassandra PHSA-2020-1.0-0348

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0348. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Openldap PHSA-2020-1.0-0349

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0349. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2020-3999

VMware ESXi 7.0 prior to ESXi70U1c-17325551, VMware Workstation 16.x prior to 16.0 and 15.x prior to 15.5.7, VMware Fusion 12.x prior to 12.0 and 11.x prior to 11.5.7 and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious...

CVE-2020-3999

VMware ESXi 7.0 prior to ESXi70U1c-17325551, VMware Workstation 16.x prior to 16.0 and 15.x prior to 15.5.7, VMware Fusion 12.x prior to 12.0 and 11.x prior to 11.5.7 and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious...

Input validation

VMware ESXi 7.0 prior to ESXi70U1c-17325551, VMware Workstation 16.x prior to 16.0 and 15.x prior to 15.5.7, VMware Fusion 12.x prior to 12.0 and 11.x prior to 11.5.7 and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious...

CVE-2020-3999

CVE-2020-3999 affects VMware ESXi (7.0 with patch ESXi70U1c-17325551), VMware Workstation (16.x before 16.0 and 15.x before 15.5.7), VMware Fusion (12.x before 12.0 and 11.x before 11.5.7) and VMware Cloud Foundation. The vulnerability is a denial of service caused by improper input validation in...