Hashicorp vagrant-vmware-fusion 4.0.23 - Local Privilege Escalation

A couple of weeks ago I disclosed a local root privesc in Hashicorp's vagrant-vmware-fusion plugin: https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmw... The initial patch they released was 4.0.21 which unfortunately contained a bug that prevented it from working at all...

Hashicorp vagrant-vmware-fusion 5.0.3 - Local Privilege Escalation

Hashicorp vagrant-vmware-fusion 5.0.3 - Local Privilege Escalation Another day, another root privesc bug in this plugin. Not quite so serious this time - this one is only exploitable if the user has the plugin installed but VMware Fusion not installed. This is a fairly unlikely scenario but it's ...

Hashicorp vagrant-vmware-fusion 5.0.3 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits Another day, another root privesc bug in this plugin. Not quite so serious this time - this one is only exploitable if the user has the plugin installed but VMware Fusion not installed. This is a fairly unlikely scenario but it's a straight to...

Hashicorp vagrant-vmware-fusion 4.0.23 - Local Privilege Escalation

Hashicorp vagrant-vmware-fusion 4.0.23 - Local Privilege Escalation A couple of weeks ago I disclosed a local root privesc in Hashicorp's vagrant-vmware-fusion plugin: https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmw... The initial patch they released was 4.0.21 which...

Hashicorp vagrant-vmware-fusion 4.0.24 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits I have previously disclosed a couple of bugs in Hashicorp's vagrant-vmware-fusion plugin for vagrant. Unfortunately the 4.0.23 release which was supposed to fix the previous bug I reported didn't address the issue, so Hashicorp quickly put out...

Design/Logic Flaw

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

CVE-2017-4920

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

CVE-2017-4920

CVE-2017-4920 affects VMware NSX-V Edge: the OSPF implementation mishandles LSA processing in NSX-V Edge 6.2.x (before 6.2.8) and 6.3.x (before 6.3.3). A rogue LSA can trigger continuous LSAs between two routers, potentially creating a loop or causing loss of connectivity. The issue is mitigated ...

CVE-2017-4920

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

VMware Fusion 8.x < 8.5.9 Multiple Vulnerabilities (VMSA-2017-0018) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 8.x prior to 8.5.9. It is, therefore, affected by multiple vulnerabilities that allow arbitrary code execution or crashing of VMs. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104851;...

VMware Horizon View Client 4.x < 4.6.1 Multiple Vulnerabilities (VMSA-2017-0018)

The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities including arbitrary code execution or a DoS. Note that Nessus has not tested for these issues but has instead relied only on the application's...

VMware Workstation 12.x < 12.5.8 Multiple Vulnerabilities (VMSA-2017-0018)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.8. It is, therefore, affected by multiple vulnerabilities including arbitrary code execution and a local DoS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104853;...

Internet Bug Bounty: Multiple issues in Libxml2 (2.9.2 - 2.9.5)

Libxml2 is the XML C parser and toolkit developed for the Gnome project. Due to its flexible C implementation and continuous development, Libxml2 is known to be very portable, the library builds and works on a variety of systems Linux, Unix, Windows, CygWin, MacOS, MacOS X, RISC Os, OS/2, VMS, QN...

VMware Workstation NAT IP Fragment Reassembly Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

HashiCorp Vagrant VMware Fusion Plugin Local Elevation of Privilege Vulnerability

The HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion is a tool developed by HashiCorp in the United States for building and managing virtual machine environments on VMware virtual machines. A security vulnerability exists in version 5.0.3 of the HashiCorp Vagrant VMware Fusion...

Trend Micro Protects VMware on Amazon Web Services

Organizations are taking advantage of changes in computing technology to position themselves for a more agile future. Technology leaders and architects see value beyond the data center with new public cloud models and are keen on adopting hybrid infrastructure approaches to their compute...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37489)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

VMware Workstation and Fusion Heap Buffer Overflow Vulnerability

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on App...

VMware Workstation DLL Hijacking Vulnerability

VMWare Workstation is a suite of desktop virtualization software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. installer is one of the installation programs. A DLL hijacking vulnerability exists in the installer ...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37491)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...