Read the docs
TI-2017-03057 Aliases CVE-2017-4925GHSA-vm9p-h4v4-cfq7

NULL pointer dereference in VMware ESXi

Priority LOW 25CWE-476Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-476.

Summary

VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Why it matters now

EPSS 0.00384 32nd percentileScored 2026-11-07
Fix Fixed Workstation (VMware): 12.5.3Fusion (VMware): 8.5.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareESXi6.5 without patch ESXi650-201707101-SG; 6.0 without patch ESXi600-201706101-SG; 5.5 without patch ESXi550-201709101-SG—No fix listedCNA
VMwareWorkstation12 to before 12.5.312.5.3Patch availableCNA
VMwareFusion8 to before 8.5.48.5.4Patch availableCNA
  • ESXi VendorVMware Affected 6.5 without patch ESXi650-201707101-SG; 6.0 without patch ESXi600-201706101-SG; 5.5 without patch ESXi550-201709101-SG Fixed in — No fix listed CNA
  • Workstation VendorVMware Affected 12 to before 12.5.3 Fixed in 12.5.3 Patch available CNA
  • Fusion VendorVMware Affected 8 to before 8.5.4 Fixed in 8.5.4 Patch available CNA

CPE configurations NVD · 91

CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*5.5VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*5.5 1VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*5.5 2VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*5.5 3aVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*5.5 3bVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:*5.5 550-20170901001sVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*6.0VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*6.0 1VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*6.0 1aVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*6.0 1bVulnerableVMware
  • cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:* Versions 5.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:* Versions 5.5 1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:* Versions 5.5 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:* Versions 5.5 3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:* Versions 5.5 3b Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:* Versions 5.5 550-20170901001s Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:* Versions 6.0 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:* Versions 6.0 1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:* Versions 6.0 1a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:* Versions 6.0 1b Vulnerable ·VMware
Show 81 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*6.0 2VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*6.0 3VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*6.0 3aVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*6.0 600-201504401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*6.0 600-201505401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*6.0 600-201507101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*6.0 600-201507102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*6.0 600-201507401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*6.0 600-201507402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*6.0 600-201507403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*6.0 600-201507404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*6.0 600-201507405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*6.0 600-201507406VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*6.0 600-201507407VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*6.0 600-201509101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*6.0 600-201509102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*6.0 600-201509201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*6.0 600-201509202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*6.0 600-201509203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*6.0 600-201509204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*6.0 600-201509205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*6.0 600-201509206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*6.0 600-201509207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*6.0 600-201509208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*6.0 600-201509209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*6.0 600-201509210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*6.0 600-201510401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*6.0 600-201511401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*6.0 600-201601101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*6.0 600-201601102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*6.0 600-201601401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*6.0 600-201601402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*6.0 600-201601403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*6.0 600-201601404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*6.0 600-201601405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*6.0 600-201602401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*6.0 600-201603101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*6.0 600-201603102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*6.0 600-201603201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*6.0 600-201603202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*6.0 600-201603203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*6.0 600-201603204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*6.0 600-201603205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*6.0 600-201603206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*6.0 600-201603207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*6.0 600-201603208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*6.0 600-201605401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*6.0 600-201608101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*6.0 600-201608401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*6.0 600-201608402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*6.0 600-201608403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*6.0 600-201608404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*6.0 600-201608405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*6.0 600-201610410VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*6.0 600-201611401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*6.0 600-201611402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*6.0 600-201611403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*6.0 600-201702101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*6.0 600-201702102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*6.0 600-201702201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*6.0 600-201702202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*6.0 600-201702203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*6.0 600-201702204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*6.0 600-201702205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*6.0 600-201702206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*6.0 600-201702207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*6.0 600-201702208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*6.0 600-201702209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*6.0 600-201702210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*6.0 600-201702211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*6.0 600-201702212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*6.0 600-201703401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*6.5 650-201701001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*6.5 650-201703001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*6.5 650-201703002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*6.5 650-201704001VulnerableVMware
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*12.0.0 to before 12.5.3VulnerableVMware
cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*12.0.0 to before 12.5.3VulnerableVMware
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*8.0.0 to before 8.5.4VulnerableVMware
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*not specified by NVDRunning onApple
  • cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:* Versions 6.0 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:* Versions 6.0 3 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:* Versions 6.0 3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:* Versions 6.0 600-201504401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:* Versions 6.0 600-201505401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:* Versions 6.0 600-201507101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:* Versions 6.0 600-201507102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:* Versions 6.0 600-201507401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:* Versions 6.0 600-201507402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:* Versions 6.0 600-201507403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:* Versions 6.0 600-201507404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:* Versions 6.0 600-201507405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:* Versions 6.0 600-201507406 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:* Versions 6.0 600-201507407 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:* Versions 6.0 600-201509101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:* Versions 6.0 600-201509102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:* Versions 6.0 600-201509201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:* Versions 6.0 600-201509202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:* Versions 6.0 600-201509203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:* Versions 6.0 600-201509204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:* Versions 6.0 600-201509205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:* Versions 6.0 600-201509206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:* Versions 6.0 600-201509207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:* Versions 6.0 600-201509208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:* Versions 6.0 600-201509209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:* Versions 6.0 600-201509210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:* Versions 6.0 600-201510401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:* Versions 6.0 600-201511401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:* Versions 6.0 600-201601101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:* Versions 6.0 600-201601102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:* Versions 6.0 600-201601401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:* Versions 6.0 600-201601402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:* Versions 6.0 600-201601403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:* Versions 6.0 600-201601404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:* Versions 6.0 600-201601405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:* Versions 6.0 600-201602401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:* Versions 6.0 600-201603101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:* Versions 6.0 600-201603102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:* Versions 6.0 600-201603201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:* Versions 6.0 600-201603202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:* Versions 6.0 600-201603203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:* Versions 6.0 600-201603204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:* Versions 6.0 600-201603205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:* Versions 6.0 600-201603206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:* Versions 6.0 600-201603207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:* Versions 6.0 600-201603208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:* Versions 6.0 600-201605401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:* Versions 6.0 600-201608101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:* Versions 6.0 600-201608401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:* Versions 6.0 600-201608402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:* Versions 6.0 600-201608403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:* Versions 6.0 600-201608404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:* Versions 6.0 600-201608405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:* Versions 6.0 600-201610410 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:* Versions 6.0 600-201611401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:* Versions 6.0 600-201611402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:* Versions 6.0 600-201611403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:* Versions 6.0 600-201702101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:* Versions 6.0 600-201702102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:* Versions 6.0 600-201702201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:* Versions 6.0 600-201702202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:* Versions 6.0 600-201702203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:* Versions 6.0 600-201702204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:* Versions 6.0 600-201702205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:* Versions 6.0 600-201702206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:* Versions 6.0 600-201702207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:* Versions 6.0 600-201702208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:* Versions 6.0 600-201702209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:* Versions 6.0 600-201702210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:* Versions 6.0 600-201702211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:* Versions 6.0 600-201702212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:* Versions 6.0 600-201703401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:* Versions 6.5 650-201701001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:* Versions 6.5 650-201703001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:* Versions 6.5 650-201703002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:* Versions 6.5 650-201704001 Vulnerable ·VMware
  • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 12.0.0 to before 12.5.3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:* Versions 12.0.0 to before 12.5.3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 8.0.0 to before 8.5.4 Vulnerable ·VMware
  • cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple

Remediation

  • Fix · CNA Workstation (VMware) Fixed in 12.5.3
  • Fix · CNA Fusion (VMware) Fixed in 8.5.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-4925
  2. 2026-10-03 Alias added: GHSA-vm9p-h4v4-cfq7

References

Advisory 1

  • TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
  • TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
  • TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
  • TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences