Read the docs
TI-2018-05094 Aliases CVE-2018-6972GHSA-xmm5-6qh4-9f74

NULL pointer dereference in VMware ESXi

Priority LOW 34CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-476.

Summary

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Why it matters now

EPSS 0.0296 87th percentileScored 2026-11-07
Fix Fixed Workstation (VMware): 14.1.2Fusion (VMware): 10.1.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareESXi6.7 before ESXi670-201806401-BG; 6.5 before ESXi650-201806401-BG; 6.0 before ESXi600-201806401-BG; 5.5 before ESXi550-201806401-BG—No fix listedCNA
VMwareWorkstation14 to before 14.1.214.1.2Patch availableCNA
VMwareFusion10 to before 10.1.210.1.2Patch availableCNA
  • ESXi VendorVMware Affected 6.7 before ESXi670-201806401-BG; 6.5 before ESXi650-201806401-BG; 6.0 before ESXi600-201806401-BG; 5.5 before ESXi550-201806401-BG Fixed in — No fix listed CNA
  • Workstation VendorVMware Affected 14 to before 14.1.2 Fixed in 14.1.2 Patch available CNA
  • Fusion VendorVMware Affected 10 to before 10.1.2 Fixed in 10.1.2 Patch available CNA

CPE configurations NVD · 125

CPEVersionsRoleVendor
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*14.0 to before 14.1.2VulnerableVMware
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*10.0 to before 10.1.2VulnerableVMware
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*not specified by NVDRunning onApple
cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*5.5VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*5.5 1VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*5.5 2VulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*5.5 3aVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*5.5 3bVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:*5.5 550-20170901001sVulnerableVMware
cpe:2.3:o:vmware:esxi:5.5:550-20170904001:*:*:*:*:*:*5.5 550-20170904001VulnerableVMware
  • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 14.0 to before 14.1.2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 10.0 to before 10.1.2 Vulnerable ·VMware
  • cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
  • cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:* Versions 5.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:* Versions 5.5 1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:* Versions 5.5 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:* Versions 5.5 3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:* Versions 5.5 3b Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:550-20170901001s:*:*:*:*:*:* Versions 5.5 550-20170901001s Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:5.5:550-20170904001:*:*:*:*:*:* Versions 5.5 550-20170904001 Vulnerable ·VMware
Show 115 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*6.0VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*6.0 1VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*6.0 1aVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*6.0 1bVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*6.0 2VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*6.0 3VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*6.0 3aVulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*6.0 600-201504401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*6.0 600-201505401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*6.0 600-201507101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*6.0 600-201507102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*6.0 600-201507401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*6.0 600-201507402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*6.0 600-201507403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*6.0 600-201507404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*6.0 600-201507405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*6.0 600-201507406VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*6.0 600-201507407VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*6.0 600-201509101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*6.0 600-201509102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*6.0 600-201509201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*6.0 600-201509202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*6.0 600-201509203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*6.0 600-201509204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*6.0 600-201509205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*6.0 600-201509206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*6.0 600-201509207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*6.0 600-201509208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*6.0 600-201509209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*6.0 600-201509210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*6.0 600-201510401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*6.0 600-201511401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*6.0 600-201601101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*6.0 600-201601102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*6.0 600-201601401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*6.0 600-201601402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*6.0 600-201601403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*6.0 600-201601404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*6.0 600-201601405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*6.0 600-201602401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*6.0 600-201603101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*6.0 600-201603102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*6.0 600-201603201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*6.0 600-201603202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*6.0 600-201603203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*6.0 600-201603204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*6.0 600-201603205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*6.0 600-201603206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*6.0 600-201603207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*6.0 600-201603208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*6.0 600-201605401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*6.0 600-201608101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*6.0 600-201608401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*6.0 600-201608402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*6.0 600-201608403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*6.0 600-201608404VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*6.0 600-201608405VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*6.0 600-201610410VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*6.0 600-201611401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:*6.0 600-201611402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:*6.0 600-201611403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:*6.0 600-201702101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:*6.0 600-201702102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:*6.0 600-201702201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:*6.0 600-201702202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:*6.0 600-201702203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:*6.0 600-201702204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:*6.0 600-201702205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:*6.0 600-201702206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:*6.0 600-201702207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:*6.0 600-201702208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:*6.0 600-201702209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:*6.0 600-201702210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:*6.0 600-201702211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:*6.0 600-201702212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:*6.0 600-201703401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:*6.0 600-201706101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:*6.0 600-201706102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:*6.0 600-201706103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:2:*:*:*:*:*:*6.5 2VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*6.5 650-201701001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*6.5 650-201703001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*6.5 650-201703002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*6.5 650-201704001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*6.5 650-201707101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*6.5 650-201707102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*6.5 650-201707103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*6.5 650-201707201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*6.5 650-201707202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*6.5 650-201707203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*6.5 650-201707204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*6.5 650-201707205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*6.5 650-201707206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*6.5 650-201707207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*6.5 650-201707208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*6.5 650-201707209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*6.5 650-201707210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*6.5 650-201707211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*6.5 650-201707212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*6.5 650-201707213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*6.5 650-201707214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*6.5 650-201707215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*6.5 650-201707216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*6.5 650-201707217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*6.5 650-201707218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*6.5 650-201707219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*6.5 650-201707220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*6.5 650-201707221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*6.5 650-201710001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*6.5 650-201712001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*6.5 650-201803001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*6.5 650-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*6.7 670-201806001VulnerableVMware
  • cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:* Versions 6.0 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:* Versions 6.0 1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:* Versions 6.0 1a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:* Versions 6.0 1b Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:* Versions 6.0 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:* Versions 6.0 3 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:* Versions 6.0 3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:* Versions 6.0 600-201504401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:* Versions 6.0 600-201505401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:* Versions 6.0 600-201507101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:* Versions 6.0 600-201507102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:* Versions 6.0 600-201507401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:* Versions 6.0 600-201507402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:* Versions 6.0 600-201507403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:* Versions 6.0 600-201507404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:* Versions 6.0 600-201507405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:* Versions 6.0 600-201507406 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:* Versions 6.0 600-201507407 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:* Versions 6.0 600-201509101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:* Versions 6.0 600-201509102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:* Versions 6.0 600-201509201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:* Versions 6.0 600-201509202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:* Versions 6.0 600-201509203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:* Versions 6.0 600-201509204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:* Versions 6.0 600-201509205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:* Versions 6.0 600-201509206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:* Versions 6.0 600-201509207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:* Versions 6.0 600-201509208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:* Versions 6.0 600-201509209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:* Versions 6.0 600-201509210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:* Versions 6.0 600-201510401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:* Versions 6.0 600-201511401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:* Versions 6.0 600-201601101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:* Versions 6.0 600-201601102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:* Versions 6.0 600-201601401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:* Versions 6.0 600-201601402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:* Versions 6.0 600-201601403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:* Versions 6.0 600-201601404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:* Versions 6.0 600-201601405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:* Versions 6.0 600-201602401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:* Versions 6.0 600-201603101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:* Versions 6.0 600-201603102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:* Versions 6.0 600-201603201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:* Versions 6.0 600-201603202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:* Versions 6.0 600-201603203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:* Versions 6.0 600-201603204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:* Versions 6.0 600-201603205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:* Versions 6.0 600-201603206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:* Versions 6.0 600-201603207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:* Versions 6.0 600-201603208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:* Versions 6.0 600-201605401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:* Versions 6.0 600-201608101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:* Versions 6.0 600-201608401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:* Versions 6.0 600-201608402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:* Versions 6.0 600-201608403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:* Versions 6.0 600-201608404 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:* Versions 6.0 600-201608405 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:* Versions 6.0 600-201610410 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:* Versions 6.0 600-201611401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611402:*:*:*:*:*:* Versions 6.0 600-201611402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201611403:*:*:*:*:*:* Versions 6.0 600-201611403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702101:*:*:*:*:*:* Versions 6.0 600-201702101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702102:*:*:*:*:*:* Versions 6.0 600-201702102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702201:*:*:*:*:*:* Versions 6.0 600-201702201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702202:*:*:*:*:*:* Versions 6.0 600-201702202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702203:*:*:*:*:*:* Versions 6.0 600-201702203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702204:*:*:*:*:*:* Versions 6.0 600-201702204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702205:*:*:*:*:*:* Versions 6.0 600-201702205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702206:*:*:*:*:*:* Versions 6.0 600-201702206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702207:*:*:*:*:*:* Versions 6.0 600-201702207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702208:*:*:*:*:*:* Versions 6.0 600-201702208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702209:*:*:*:*:*:* Versions 6.0 600-201702209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702210:*:*:*:*:*:* Versions 6.0 600-201702210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702211:*:*:*:*:*:* Versions 6.0 600-201702211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201702212:*:*:*:*:*:* Versions 6.0 600-201702212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201703401:*:*:*:*:*:* Versions 6.0 600-201703401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706101:*:*:*:*:*:* Versions 6.0 600-201706101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706102:*:*:*:*:*:* Versions 6.0 600-201706102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.0:600-201706103:*:*:*:*:*:* Versions 6.0 600-201706103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:2:*:*:*:*:*:* Versions 6.5 2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:* Versions 6.5 650-201701001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:* Versions 6.5 650-201703001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:* Versions 6.5 650-201703002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:* Versions 6.5 650-201704001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* Versions 6.5 650-201707101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* Versions 6.5 650-201707102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* Versions 6.5 650-201707103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* Versions 6.5 650-201707201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* Versions 6.5 650-201707202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* Versions 6.5 650-201707203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* Versions 6.5 650-201707204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* Versions 6.5 650-201707205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* Versions 6.5 650-201707206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* Versions 6.5 650-201707207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* Versions 6.5 650-201707208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* Versions 6.5 650-201707209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* Versions 6.5 650-201707210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* Versions 6.5 650-201707211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* Versions 6.5 650-201707212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* Versions 6.5 650-201707213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* Versions 6.5 650-201707214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* Versions 6.5 650-201707215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* Versions 6.5 650-201707216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* Versions 6.5 650-201707217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* Versions 6.5 650-201707218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* Versions 6.5 650-201707219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* Versions 6.5 650-201707220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* Versions 6.5 650-201707221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:* Versions 6.5 650-201710001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:* Versions 6.5 650-201712001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:* Versions 6.5 650-201803001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:* Versions 6.5 650-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:* Versions 6.7 670-201806001 Vulnerable ·VMware

Remediation

  • Fix · CNA Workstation (VMware) Fixed in 14.1.2
  • Fix · CNA Fusion (VMware) Fixed in 10.1.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-6972
  2. 2026-10-03 Alias added: GHSA-xmm5-6qh4-9f74

References

Patch 1

  • TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
  • TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
  • TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
  • TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences