Lucene search
HistoryNov 20, 2020 - 8:15 p.m.
CVE-2020-4004
cve-2020-4004
vmware
esxi
workstation
fusion
use-after-free
xhci usb controller
vulnerability
nvd
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.6%
VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7) contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine’s VMX process running on the host.
Affected configurations
Node
applemac_os_xMatch-
vmwarefusionRange11.0–11.5.7
Node
vmwarecloud_foundationRange3.0–3.10.1.2
ORvmwareworkstationRange15.0.0–15.5.7
ORvmwarecloud_foundationRange4.0–4.1.0.1
Node
vmwareesxiMatch6.5-
ORvmwareesxiMatch6.5650-201701001
ORvmwareesxiMatch6.5650-201703001
ORvmwareesxiMatch6.5650-201703002
ORvmwareesxiMatch6.5650-201704001
ORvmwareesxiMatch6.5650-201707101
ORvmwareesxiMatch6.5650-201707102
ORvmwareesxiMatch6.5650-201707103
ORvmwareesxiMatch6.5650-201707201
ORvmwareesxiMatch6.5650-201707202
ORvmwareesxiMatch6.5650-201707203
ORvmwareesxiMatch6.5650-201707204
ORvmwareesxiMatch6.5650-201707205
ORvmwareesxiMatch6.5650-201707206
ORvmwareesxiMatch6.5650-201707207
ORvmwareesxiMatch6.5650-201707208
ORvmwareesxiMatch6.5650-201707209
ORvmwareesxiMatch6.5650-201707210
ORvmwareesxiMatch6.5650-201707211
ORvmwareesxiMatch6.5650-201707212
ORvmwareesxiMatch6.5650-201707213
ORvmwareesxiMatch6.5650-201707214
ORvmwareesxiMatch6.5650-201707215
ORvmwareesxiMatch6.5650-201707216
ORvmwareesxiMatch6.5650-201707217
ORvmwareesxiMatch6.5650-201707218
ORvmwareesxiMatch6.5650-201707219
ORvmwareesxiMatch6.5650-201707220
ORvmwareesxiMatch6.5650-201707221
ORvmwareesxiMatch6.5650-201710001
ORvmwareesxiMatch6.5650-201712001
ORvmwareesxiMatch6.5650-201803001
ORvmwareesxiMatch6.5650-201806001
ORvmwareesxiMatch6.5650-201808001
ORvmwareesxiMatch6.5650-201810001
ORvmwareesxiMatch6.5650-201810002
ORvmwareesxiMatch6.5650-201811001
ORvmwareesxiMatch6.5650-201811002
ORvmwareesxiMatch6.5650-201811301
ORvmwareesxiMatch6.5650-201901001
ORvmwareesxiMatch6.5650-201903001
ORvmwareesxiMatch6.5650-201905001
ORvmwareesxiMatch6.5650-201908001
ORvmwareesxiMatch6.5650-201910001
ORvmwareesxiMatch6.5650-20191004001
ORvmwareesxiMatch6.5650-201911001
ORvmwareesxiMatch6.5650-201911401
ORvmwareesxiMatch6.5650-201911402
ORvmwareesxiMatch6.5650-201912001
ORvmwareesxiMatch6.5650-201912002
ORvmwareesxiMatch6.5650-201912101
ORvmwareesxiMatch6.5650-201912102
ORvmwareesxiMatch6.5650-201912103
ORvmwareesxiMatch6.5650-201912104
ORvmwareesxiMatch6.5650-201912301
ORvmwareesxiMatch6.5650-201912401
ORvmwareesxiMatch6.5650-201912402
ORvmwareesxiMatch6.5650-201912403
ORvmwareesxiMatch6.5650-201912404
ORvmwareesxiMatch6.5650-202005001
ORvmwareesxiMatch6.5650-202006001
ORvmwareesxiMatch6.5650-202007001
ORvmwareesxiMatch6.5650-202010001
ORvmwareesxiMatch6.5650-202011001
ORvmwareesxiMatch6.5650-202011002
Node
vmwareesxiMatch6.7-
ORvmwareesxiMatch6.7670-201806001
ORvmwareesxiMatch6.7670-201807001
ORvmwareesxiMatch6.7670-201808001
ORvmwareesxiMatch6.7670-201810001
ORvmwareesxiMatch6.7670-201810101
ORvmwareesxiMatch6.7670-201810102
ORvmwareesxiMatch6.7670-201810103
ORvmwareesxiMatch6.7670-201810201
ORvmwareesxiMatch6.7670-201810202
ORvmwareesxiMatch6.7670-201810203
ORvmwareesxiMatch6.7670-201810204
ORvmwareesxiMatch6.7670-201810205
ORvmwareesxiMatch6.7670-201810206
ORvmwareesxiMatch6.7670-201810207
ORvmwareesxiMatch6.7670-201810208
ORvmwareesxiMatch6.7670-201810209
ORvmwareesxiMatch6.7670-201810210
ORvmwareesxiMatch6.7670-201810211
ORvmwareesxiMatch6.7670-201810212
ORvmwareesxiMatch6.7670-201810213
ORvmwareesxiMatch6.7670-201810214
ORvmwareesxiMatch6.7670-201810215
ORvmwareesxiMatch6.7670-201810216
ORvmwareesxiMatch6.7670-201810217
ORvmwareesxiMatch6.7670-201810218
ORvmwareesxiMatch6.7670-201810219
ORvmwareesxiMatch6.7670-201810220
ORvmwareesxiMatch6.7670-201810221
ORvmwareesxiMatch6.7670-201810222
ORvmwareesxiMatch6.7670-201810223
ORvmwareesxiMatch6.7670-201810224
ORvmwareesxiMatch6.7670-201810225
ORvmwareesxiMatch6.7670-201810226
ORvmwareesxiMatch6.7670-201810227
ORvmwareesxiMatch6.7670-201810228
ORvmwareesxiMatch6.7670-201810229
ORvmwareesxiMatch6.7670-201810230
ORvmwareesxiMatch6.7670-201810231
ORvmwareesxiMatch6.7670-201810232
ORvmwareesxiMatch6.7670-201810233
ORvmwareesxiMatch6.7670-201810234
ORvmwareesxiMatch6.7670-201811001
ORvmwareesxiMatch6.7670-201901001
ORvmwareesxiMatch6.7670-201901401
ORvmwareesxiMatch6.7670-201901402
ORvmwareesxiMatch6.7670-201901403
ORvmwareesxiMatch6.7670-201903001
ORvmwareesxiMatch6.7670-201904001
ORvmwareesxiMatch6.7670-201904201
ORvmwareesxiMatch6.7670-201904201-ug
ORvmwareesxiMatch6.7670-201904202
ORvmwareesxiMatch6.7670-201904202-ug
ORvmwareesxiMatch6.7670-201904203
ORvmwareesxiMatch6.7670-201904203-ug
ORvmwareesxiMatch6.7670-201904204
ORvmwareesxiMatch6.7670-201904204-ug
ORvmwareesxiMatch6.7670-201904205
ORvmwareesxiMatch6.7670-201904205-ug
ORvmwareesxiMatch6.7670-201904206
ORvmwareesxiMatch6.7670-201904206-ug
ORvmwareesxiMatch6.7670-201904207
ORvmwareesxiMatch6.7670-201904207-ug
ORvmwareesxiMatch6.7670-201904208
ORvmwareesxiMatch6.7670-201904208-ug
ORvmwareesxiMatch6.7670-201904209
ORvmwareesxiMatch6.7670-201904209-ug
ORvmwareesxiMatch6.7670-201904210
ORvmwareesxiMatch6.7670-201904210-ug
ORvmwareesxiMatch6.7670-201904211
ORvmwareesxiMatch6.7670-201904211-ug
ORvmwareesxiMatch6.7670-201904212
ORvmwareesxiMatch6.7670-201904212-ug
ORvmwareesxiMatch6.7670-201904213
ORvmwareesxiMatch6.7670-201904213-ug
ORvmwareesxiMatch6.7670-201904214
ORvmwareesxiMatch6.7670-201904214-ug
ORvmwareesxiMatch6.7670-201904215
ORvmwareesxiMatch6.7670-201904215-ug
ORvmwareesxiMatch6.7670-201904216
ORvmwareesxiMatch6.7670-201904216-ug
ORvmwareesxiMatch6.7670-201904217
ORvmwareesxiMatch6.7670-201904217-ug
ORvmwareesxiMatch6.7670-201904218
ORvmwareesxiMatch6.7670-201904218-ug
ORvmwareesxiMatch6.7670-201904219
ORvmwareesxiMatch6.7670-201904219-ug
ORvmwareesxiMatch6.7670-201904220
ORvmwareesxiMatch6.7670-201904220-ug
ORvmwareesxiMatch6.7670-201904221
ORvmwareesxiMatch6.7670-201904221-ug
ORvmwareesxiMatch6.7670-201904222
ORvmwareesxiMatch6.7670-201904222-ug
ORvmwareesxiMatch6.7670-201904223
ORvmwareesxiMatch6.7670-201904223-ug
ORvmwareesxiMatch6.7670-201904224
ORvmwareesxiMatch6.7670-201904224-ug
ORvmwareesxiMatch6.7670-201904225
ORvmwareesxiMatch6.7670-201904225-ug
ORvmwareesxiMatch6.7670-201904226
ORvmwareesxiMatch6.7670-201905001
ORvmwareesxiMatch6.7670-201906002
ORvmwareesxiMatch6.7670-201911001
ORvmwareesxiMatch6.7670-201912001
ORvmwareesxiMatch6.7670-202004001
ORvmwareesxiMatch6.7670-202004002
ORvmwareesxiMatch6.7670-202006001
ORvmwareesxiMatch6.7670-202008001
ORvmwareesxiMatch6.7670-202010001
Node
vmwareesxiMatch7.0-
ORvmwareesxiMatch7.0beta
ORvmwareesxiMatch7.0update_1
ORvmwareesxiMatch7.0update_1a
ORvmwareesxiMatch7.0update_1b
| CPE | Name | Operator | Version |
|---|---|---|---|
| vmware:fusion | vmware fusion | lt | 11.5.7 |
CNA Affected
[
{
"product": "VMware ESXi",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "7.0 before ESXi70U1b-17168206"
},
{
"status": "affected",
"version": "6.7 before ESXi670-202011101-SG"
},
{
"status": "affected",
"version": "6.5 before ESXi650-202011301-SG"
}
]
},
{
"product": "Workstation",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "15.x before 15.5.7"
}
]
},
{
"product": "Fusion",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "11.x before 11.5.7"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2020-11-20 20:15:00
Privilege escalation
2020-11-20 20:15:00
cvelist
cvelist
CVE-2020-4004
2020-11-20 19:06:28
CVE-2020-4005
2020-11-20 19:06:25
kaspersky
kaspersky
KLA12101 Use after free vulnerability in VMware Workstation and Player
2020-11-19 00:00:00
nessus
nessus
VMware Workstation 15.x < 15.5.7 Use-after-free (VMSA-2020-0026)
2020-11-24 00:00:00
VMware Fusion 11.x < 11.5.7 Use-after-free (VMSA-2020-0026)
2020-11-24 00:00:00
nvd
nvd
CVE-2020-4004
2020-11-20 20:15:13
CVE-2020-4005
2020-11-20 20:15:13
vmware
vmware
threatpost
threatpost
VMware Fixes Critical Flaw in ESXi Hypervisor
2020-11-20 20:18:13
cve
cve
CVE-2020-4005
2020-11-20 20:15:13
thn
thn
Critical Unpatched VMware Flaw Affects Multiple Corporates Products
2020-11-24 07:08:00
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.6%
Related for CVE-2020-4004