DoS vulnerability in VMware products

Description

Multiple vulnerabilities were found in VMware products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

1. A NULL pointer dereference vulnerability was found in VMware Workstation and Fusion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally via RPC handler;
2. Local information disclosure vulnerability can be exploited to gain privileges;

Original advisories

• VMSA-2018-0018

Related products

• VMware-Workstation
• VMware-Fusion

CVE list

• CVE-2018-6972
  warning
• CVE-2018-6971
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com