Multiple vulnerabilities in VMware Workstation and Player

説明

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. An out of bounds read vulnerability in ACPI device can be exploited to obtain sensitive information.
2. An out of bounds write vulnerability in ACPI device can be exploited to cause denial of service.
3. A memory leak vulnerability in VMCI host driver can be exploited to obtain sensitive information.

オリジナルアドバイザリー

• VMSA-2020-0023

関連製品

• VMware-Workstation
• VMware-Player

CVEリスト

• CVE-2020-3981
  high
• CVE-2020-3982
  critical
• CVE-2020-3995
  high

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com