CVE-2017-4902 VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buf...
HighCVSS 8.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation player | >= 12.0.0, < 12.5.5 | 12.5.5 |
| VMware workstation pro | >= 12.0.0, < 12.5.5 | 12.5.5 |
| VMware esxi | = 5.5 | No fix listed |
| VMware esxi | = 5.5-1 | No fix listed |
| VMware esxi | = 5.5-2 | No fix listed |
| VMware esxi | = 5.5-3a | No fix listed |
| VMware esxi | = 5.5-3b | No fix listed |
| VMware esxi | = 6.5 | No fix listed |
| VMware esxi | = 6.5-650-201701001 | No fix listed |
| VMware esxi | = 6.5-650-201703001 | No fix listed |
| VMware esxi | = 6.5-650-201703002 | No fix listed |
| VMware Fusion | >= 8.0.0, < 8.5.6 | 8.5.6 |
| VMware fusion pro | >= 8.0.0, < 8.5.6 | 8.5.6 |
| VMware esxi | = 6.5 without patch ESXi650-201703410-SG | No fix listed |
| VMware esxi | = 5.5 without patch ESXi550-201703401-SG | No fix listed |
| VMware Workstation Pro / Player | = 12.x prior to 12.5.5 | No fix listed |
| VMware Fusion Pro / Fusion | = 8.x prior to 8.5.6 | No fix listed |
References
- 97163 third-party-advisory vdb-entry
- 1038148 third-party-advisory vdb-entry
- 1038149 third-party-advisory vdb-entry
- www.vmware.com patch vendor-advisory