Photon OS 3.0: Krb5 PHSA-2019-3.0-0020

An update of the krb5 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126183;...

Photon OS 1.0: Linux PHSA-2019-1.0-0236

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0236. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126121...

Photon OS 1.0: Krb5 PHSA-2019-1.0-0239

An update of the krb5 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0239. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126187;...

Photon OS 1.0: Linux PHSA-2019-1.0-0240

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0240. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126176...

Photon OS 1.0: Mesos PHSA-2019-1.0-0239

An update of the mesos package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0239. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid126188...

Photon OS 2.0: Krb5 PHSA-2019-2.0-0164

An update of the krb5 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0164. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126181;...

Photon OS 1.0: Python3 PHSA-2019-1.0-0240

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0240. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Polkit PHSA-2019-1.0-0236

An update of the polkit package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0236. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12612...

VMware Tools 10.2.x / 10.3.x < 10.3.10 Information Disclosure / Denial of Service Vulnerability (VMSA-2019-0009)

The version of VMware Tools installed on the remote Windows host is 10.2.x / 10.3.s prior to 10.3.10. It is, therefore, affected by an information disclosure / denial of service vulnerability due to an out of bounds read vulnerability in the vm3dmp driver which is installed with vmtools. An...

VMware Workstation (Linux) 15.0.x < 15.1.0 Use After Free Vulnerability (VMSA-2019-0009)

The version of VMware Workstation installed on the remote Linux host is 15.0.x prior to 15.1.0. It is, therefore, affected by a use after free vulnerability in the Advanced Linux Sounds Architecture Backend. An authenticated, local attacker can exploit this, in conjunction with other issues, to...

Security Bulletin: Multiple open source vulnerabilities affect IBM PureApplication System

Summary Vulnerabilities in openSSL, glibc, curl, and VMWare that are used in IBM PureApplication System. IBM PureApplication System has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000301 DESCRIPTION: curl is vulnerable to a denial of service, caused by heap-based buffe...

Design/Logic Flaw

VMware Workstation 15.x before 15.1.0 contains a use-after-free vulnerability in the Advanced Linux Sound Architecture ALSA backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where...

CVE-2019-5525

VMware Workstation 15.x before 15.1.0 contains a use-after-free vulnerability in the Advanced Linux Sound Architecture ALSA backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where...

CVE-2019-5522

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access to a Windows guest with...

CVE-2019-5522

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access to a Windows guest with...

Out-of-bounds

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access to a Windows guest with...

CVE-2019-5525

VMware Workstation 15.x before 15.1.0 contains a use-after-free vulnerability in the Advanced Linux Sound Architecture ALSA backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where...

CVE-2019-5525

VMware Workstation 15.x before 15.1.0 contains a use-after-free vulnerability in the Advanced Linux Sound Architecture ALSA backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where...

CVE-2019-5525

CVE-2019-5525 is a use-after-free vulnerability in the ALSA backend of VMware Workstation. In the Linux host context, a malicious user with normal guest-privilege can exploit the issue (in combination with other issues) to execute arbitrary code on the host. Affected are VMware Workstation 15.x p...

CVE-2019-5522

CVE-2019-5522 concerns VMware Tools for Windows. The vulnerability is an out-of-bounds read in the vm3dmp driver installed with VMware Tools, affecting VMware Tools for Windows versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access in a Windows guest could le...