KLA11296
DoS vulnerability in VMware products

Multiple vulnerabilities were found in VMware products. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges.

Below is a complete list of vulnerabilities:

1. A NULL pointer dereference vulnerability was found in VMware Workstation and Fusion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally via RPC handler;
2. Local information disclosure vulnerability can be exploited to gain privileges;

Update to the latest version
Download VMware Fusion
Download Workstation

VMSA-2018-0018