Lucene search

K
vmwareVMwareVMSA-2008-0019.1
HistoryDec 02, 2008 - 12:00 a.m.

VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

2008-12-0200:00:00
www.vmware.com
90

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.086 Low

EPSS

Percentile

94.5%

a. Critical Memory corruption vulnerabilityA memory corruption condition may occur in the virtual machinehardware. A malicious request sent from the guest operatingsystem to the virtual hardware may cause the virtual hardware towrite to uncontrolled physical memory.VMware would like to thank Andrew Honig of the Department ofDefense for reporting this issue.The Common Vulnerabilities and Exposures project (cve.mitre.org)has assigned the name CVE-2008-4917 to this issue.The following table lists what action remediates the vulnerability(column 4) if a solution is available.

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.086 Low

EPSS

Percentile

94.5%