CVE-2017-4933 VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap ove...
HighCVSS 8.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation pro | >= 12.0.0, < 12.5.8 | 12.5.8 |
| VMware workstation pro | = 14.0 | No fix listed |
| VMware workstation pro | = 14.1.0 | No fix listed |
| VMware esxi | = 6.5 | No fix listed |
| VMware esxi | = 6.5-650-201701001 | No fix listed |
| VMware esxi | = 6.5-650-201703001 | No fix listed |
| VMware esxi | = 6.5-650-201703002 | No fix listed |
| VMware esxi | = 6.5-650-201704001 | No fix listed |
| VMware esxi | = 6.5-650-201707101 | No fix listed |
| VMware esxi | = 6.5-650-201707102 | No fix listed |
| VMware esxi | = 6.5-650-201707103 | No fix listed |
| VMware esxi | = 6.5-650-201707201 | No fix listed |
| VMware esxi | = 6.5-650-201707202 | No fix listed |
| VMware esxi | = 6.5-650-201707203 | No fix listed |
| VMware esxi | = 6.5-650-201707204 | No fix listed |
| VMware esxi | = 6.5-650-201707205 | No fix listed |
| VMware esxi | = 6.5-650-201707206 | No fix listed |
| VMware esxi | = 6.5-650-201707207 | No fix listed |
| VMware esxi | = 6.5-650-201707208 | No fix listed |
| VMware esxi | = 6.5-650-201707209 | No fix listed |
| VMware esxi | = 6.5-650-201707210 | No fix listed |
| VMware esxi | = 6.5-650-201707211 | No fix listed |
| VMware esxi | = 6.5-650-201707212 | No fix listed |
| VMware esxi | = 6.5-650-201707213 | No fix listed |
| VMware esxi | = 6.5-650-201707214 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware esxi | = 6.5-650-201707215 | No fix listed |
| VMware esxi | = 6.5-650-201707216 | No fix listed |
| VMware esxi | = 6.5-650-201707217 | No fix listed |
| VMware esxi | = 6.5-650-201707218 | No fix listed |
| VMware esxi | = 6.5-650-201707219 | No fix listed |
| VMware esxi | = 6.5-650-201707220 | No fix listed |
| VMware esxi | = 6.5-650-201707221 | No fix listed |
| VMware esxi | = 6.5-650-201710001 | No fix listed |
| VMware Fusion | >= 8.0.0, < 8.5.9 | 8.5.9 |
| VMware esxi | = 6.5 before ESXi650-201710401-BG | No fix listed |
| VMware Workstation | = 12.x before 12.5.8 | No fix listed |
| VMware Fusion | = 8.x before 8.5.9 | No fix listed |
References
- 1040024 third-party-advisory vdb-entry
- 1040025 third-party-advisory vdb-entry
- www.vmware.com issue-tracking vendor-advisory