Out-of-bounds read in VMware ESXi, Workstation, Fusion
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| VMware | VMware ESXi, Workstation, Fusion | ESXi 6.7 before ESXi670-201903001; ESXi 6.5 before ESXi650-201903001; ESXi 6.0 before ESXi600-201903001; Workstation 15.x before 15.0.4; Workstation 14.x before 14.1.7; Fusion 11.x before 11.0.3; Fusion 10.x before 10.1.6 | — | No fix listed | CNA |
- VMware ESXi, Workstation, Fusion VendorVMware Affected ESXi 6.7 before ESXi670-201903001; ESXi 6.5 before ESXi650-201903001; ESXi 6.0 before ESXi600-201903001; Workstation 15.x before 15.0.4; Workstation 14.x before 14.1.7; Fusion 11.x before 11.0.3; Fusion 10.x before 10.1.6 Fixed in — No fix listed CNA
CPE configurations NVD · 73
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* | 10.0.0 to before 10.1.6; 11.0.0 to before 11.0.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* | 14.0.0 to before 14.1.7; 15.0.0 to before 15.0.4 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:* | 6.0 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.0:600-201811001:*:*:*:*:*:* | 6.0 600-201811001 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.0:600-201811401:*:*:*:*:*:* | 6.0 600-201811401 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* | 6.5 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* | 6.5 650-201707101 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* | 6.5 650-201707102 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* | 6.5 650-201707103 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* | 6.5 650-201707201 | Vulnerable | VMware |
- cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 10.0.0 to before 10.1.6; 11.0.0 to before 11.0.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 14.0.0 to before 14.1.7; 15.0.0 to before 15.0.4 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:* Versions 6.0 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.0:600-201811001:*:*:*:*:*:* Versions 6.0 600-201811001 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.0:600-201811401:*:*:*:*:*:* Versions 6.0 600-201811401 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* Versions 6.5 650-201707101 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* Versions 6.5 650-201707102 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* Versions 6.5 650-201707103 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* Versions 6.5 650-201707201 Vulnerable ·VMware
Show 63 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* | 6.5 650-201707202 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* | 6.5 650-201707203 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* | 6.5 650-201707204 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* | 6.5 650-201707205 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* | 6.5 650-201707206 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* | 6.5 650-201707207 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* | 6.5 650-201707208 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* | 6.5 650-201707209 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* | 6.5 650-201707210 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* | 6.5 650-201707211 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* | 6.5 650-201707212 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* | 6.5 650-201707213 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* | 6.5 650-201707214 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* | 6.5 650-201707215 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* | 6.5 650-201707216 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* | 6.5 650-201707217 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* | 6.5 650-201707218 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* | 6.5 650-201707219 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* | 6.5 650-201707220 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* | 6.5 650-201707221 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:* | 6.5 650-201811001 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:* | 6.5 650-201811301 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:* | 6.7 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:* | 6.7 670-201810101 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:* | 6.7 670-201810102 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:* | 6.7 670-201810103 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:* | 6.7 670-201810201 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:* | 6.7 670-201810202 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:* | 6.7 670-201810203 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:* | 6.7 670-201810204 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:* | 6.7 670-201810205 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:* | 6.7 670-201810206 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:* | 6.7 670-201810207 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:* | 6.7 670-201810208 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:* | 6.7 670-201810209 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:* | 6.7 670-201810210 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:* | 6.7 670-201810211 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:* | 6.7 670-201810212 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:* | 6.7 670-201810213 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:* | 6.7 670-201810214 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:* | 6.7 670-201810215 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:* | 6.7 670-201810216 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:* | 6.7 670-201810217 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:* | 6.7 670-201810218 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:* | 6.7 670-201810219 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:* | 6.7 670-201810220 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:* | 6.7 670-201810221 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:* | 6.7 670-201810222 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:* | 6.7 670-201810223 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:* | 6.7 670-201810224 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:* | 6.7 670-201810225 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:* | 6.7 670-201810226 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:* | 6.7 670-201810227 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:* | 6.7 670-201810228 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:* | 6.7 670-201810229 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:* | 6.7 670-201810230 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:* | 6.7 670-201810231 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:* | 6.7 670-201810232 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:* | 6.7 670-201810233 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:* | 6.7 670-201810234 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:* | 6.7 670-201901401 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:* | 6.7 670-201901402 | Vulnerable | VMware |
| cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:* | 6.7 670-201901403 | Vulnerable | VMware |
- cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* Versions 6.5 650-201707202 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* Versions 6.5 650-201707203 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* Versions 6.5 650-201707204 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* Versions 6.5 650-201707205 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* Versions 6.5 650-201707206 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* Versions 6.5 650-201707207 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* Versions 6.5 650-201707208 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* Versions 6.5 650-201707209 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* Versions 6.5 650-201707210 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* Versions 6.5 650-201707211 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* Versions 6.5 650-201707212 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* Versions 6.5 650-201707213 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* Versions 6.5 650-201707214 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* Versions 6.5 650-201707215 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* Versions 6.5 650-201707216 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* Versions 6.5 650-201707217 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* Versions 6.5 650-201707218 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* Versions 6.5 650-201707219 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* Versions 6.5 650-201707220 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* Versions 6.5 650-201707221 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:* Versions 6.5 650-201811001 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:* Versions 6.5 650-201811301 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:* Versions 6.7 670-201810101 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:* Versions 6.7 670-201810102 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:* Versions 6.7 670-201810103 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:* Versions 6.7 670-201810201 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:* Versions 6.7 670-201810202 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:* Versions 6.7 670-201810203 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:* Versions 6.7 670-201810204 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:* Versions 6.7 670-201810205 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:* Versions 6.7 670-201810206 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:* Versions 6.7 670-201810207 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:* Versions 6.7 670-201810208 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:* Versions 6.7 670-201810209 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:* Versions 6.7 670-201810210 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:* Versions 6.7 670-201810211 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:* Versions 6.7 670-201810212 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:* Versions 6.7 670-201810213 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:* Versions 6.7 670-201810214 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:* Versions 6.7 670-201810215 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:* Versions 6.7 670-201810216 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:* Versions 6.7 670-201810217 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:* Versions 6.7 670-201810218 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:* Versions 6.7 670-201810219 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:* Versions 6.7 670-201810220 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:* Versions 6.7 670-201810221 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:* Versions 6.7 670-201810222 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:* Versions 6.7 670-201810223 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:* Versions 6.7 670-201810224 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:* Versions 6.7 670-201810225 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:* Versions 6.7 670-201810226 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:* Versions 6.7 670-201810227 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:* Versions 6.7 670-201810228 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:* Versions 6.7 670-201810229 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:* Versions 6.7 670-201810230 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:* Versions 6.7 670-201810231 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:* Versions 6.7 670-201810232 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:* Versions 6.7 670-201810233 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:* Versions 6.7 670-201810234 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:* Versions 6.7 670-201901401 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:* Versions 6.7 670-201901402 Vulnerable ·VMware
- cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:* Versions 6.7 670-201901403 Vulnerable ·VMware
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-5518
- 2026-10-03 Alias added: GHSA-v3rr-cmxc-fgwv
References
More VMware Esxi vulnerabilities
- TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
- TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
- TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
- TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
Sources
- CVE-2019-5518 · CVE Program
- CVE-2019-5518 · NVD
- FIRST EPSS
- GHSA-v3rr-cmxc-fgwv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences