VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities

a. Heap buffer-overflow vulnerability in VMNAT device VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host. VMware would like to thank Jun Mao of Tencent PC Manager working with Trend Micro's Zero Day...

KLA11143 Multiple vulnerabilities in VMware Workstation, Fusion and Horizon View Client

Multiple serious vulnerabilities have been found in VMware Workstation, Fusion and Horizon View Client. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities: 1. A heap...

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1245)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The iscsiifrx function in drivers/scsi/scsitransportiscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service...

VMSA-2017-0019:NSX for vSphere update addresses NSX Edge Cross-Site Scripting (XSS) issue.

VMSA-2017-0019 NSX for vSphere update addresses NSX Edge Cross-Site Scripting XSS issue. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0019 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: NSX for vSphere update addresses NSX Edge Cross-Sit...

CVE-2017-14390: CF-deployment 0.35.0 syslog misconfiguration | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions cf-deployment v0.35.0 Description A misconfiguration with Loggregator and syslog-drain in cf-deployment causes logs to be drained to unintended locations. Mitigation Users of affected versions should appl...

VMSA-2017-0018:VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities

VMSA-2017-0018.1 VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0018.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation,...

VMware vCenter Server Information Disclosure Vulnerability (CNVD-2017-33977)

VMware vCenter Server provides a centralized, scalable platform for managing virtual infrastructure. An information disclosure vulnerability exists in VMware vCenter Server versions 5.5, 6.0, and 6.5. A remote user can trigger the URL authentication vulnerability by sending a specially crafted PO...

VMware AirWatch Console Cross-Site Scripting Vulnerability

VMware AirWatch is an enterprise mobility management solution from VMware. VMware AirWatch Console is one of the console applications.A cross-site scripting vulnerability exists in VMware AirWatch Console version 9.x prior to 9.2.0. A remote attacker could exploit the vulnerability to redirect...

VMware AirWatch Console Security Bypass Vulnerability

VMware AirWatch is a console application for the VMware AirWatch Console, a suite of enterprise mobility management solutions from VMware. A security bypass vulnerability exists in VMware AirWatch Console version 9.x prior to 9.2.0. A remote attacker could exploit the vulnerability to write...

KLA11142 DoS and OSI vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware vCenter Server and vSphere Web Client. Malicious users can exploit these vulnerabilities to cause denial of service or disclose sensetive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in VMware...

HashiCorp Vagrant VMware Fusion Plugin Permissions Vulnerability

The HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion is a tool developed by HashiCorp in the United States for building and managing virtual machine environments on VMware virtual machines. A security vulnerability exists in version 5.0.1 of the HashiCorp Vagrant VMware Fusion...

HashiCorp Vagrant VMware Fusion Plugin Elevation of Privilege Vulnerability (CNVD-2017-33966)

The HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion is a tool developed by HashiCorp in the United States for building and managing virtual machine environments on VMware virtual machines. A security vulnerability exists in the HashiCorp Vagrant VMware Fusion plugin version 5.0.0...

3 Reasons to Use VMware NSX with Trend Micro Deep Security

Enterprises have begun adopting network virtualization for their IT infrastructure. According to a 2016 survey conducted by Accenture, 95 percent of small, medium, and large enterprises believe “network services will be virtualized.” Meanwhile, 25 percent of those who have adopted network...

VMSA-2017-0017:VMware vCenter Server update resolves LDAP DoS, SSRF and CRLF injection issues

VMSA-2017-0017 VMware vCenter Server update resolves LDAP DoS, SSRF and CRLF injection issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0017 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware vCenter Server update resolves LDAP DoS...

VMware AirWatch Console and Launcher for Android updates resolve multiple vulnerabilities.

a. VMware AirWatch Console stored XSS vulnerability VMware AirWatch Console contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device’s ‘Links’ page. Successful exploitation of this issue could result in an unsuspecting AWC user being...

CVE-2017-16001

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

Denial of service

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-16001

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-16001

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-16001

HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) 5.0.1 is affected by a local privilege-escalation via subversion of the plugin update process, allowing local attackers/malware to escalate to root. The issue is specific to the 5.0.1 release; mitigation is available in version 5.0.2....