CVE-2018-6957 VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note:....
MediumCVSS 5.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation pro | >= 14.0, < 14.1.1 | 14.1.1 |
| VMware workstation pro | = 12.0 | No fix listed |
| VMware workstation pro | = 12.1 | No fix listed |
| VMware workstation pro | = 12.01 | No fix listed |
| VMware workstation pro | = 12.1.1 | No fix listed |
| VMware workstation pro | = 12.5 | No fix listed |
| VMware workstation pro | = 12.5.1 | No fix listed |
| VMware workstation pro | = 12.5.2 | No fix listed |
| VMware workstation pro | = 12.5.3 | No fix listed |
| VMware workstation pro | = 12.5.4 | No fix listed |
| VMware workstation pro | = 12.5.5 | No fix listed |
| VMware workstation pro | = 12.5.6 | No fix listed |
| VMware workstation pro | = 12.5.7 | No fix listed |
| VMware workstation player | >= 14.0, < 14.1.1 | 14.1.1 |
| VMware workstation player | = 12.0 | No fix listed |
| VMware workstation player | = 12.0.1 | No fix listed |
| VMware workstation player | = 12.1 | No fix listed |
| VMware workstation player | = 12.1.1 | No fix listed |
| VMware workstation player | = 12.5 | No fix listed |
| VMware workstation player | = 12.5.1 | No fix listed |
| VMware workstation player | = 12.5.2 | No fix listed |
| VMware workstation player | = 12.5.3 | No fix listed |
| VMware workstation player | = 12.5.4 | No fix listed |
| VMware workstation player | = 12.5.5 | No fix listed |
| VMware workstation player | = 12.5.6 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation player | = 12.5.7 | No fix listed |
| VMware Fusion | = 8.0 | No fix listed |
| VMware Fusion | = 8.0.1 | No fix listed |
| VMware Fusion | = 8.0.2 | No fix listed |
| VMware Fusion | = 8.1 | No fix listed |
| VMware Fusion | = 8.1.1 | No fix listed |
| VMware Fusion | = 8.5 | No fix listed |
| VMware Fusion | = 8.5.1 | No fix listed |
| VMware Fusion | = 8.5.2 | No fix listed |
| VMware Fusion | = 8.5.3 | No fix listed |
| VMware Fusion | = 8.5.4 | No fix listed |
| VMware Fusion | = 8.5.5 | No fix listed |
| VMware Fusion | = 8.5.6 | No fix listed |
| VMware Fusion | = 8.5.7 | No fix listed |
| VMware Fusion | = 8.5.8 | No fix listed |
| VMware Fusion | >= 10.0, < 10.1.1 | 10.1.1 |
| VMware Workstation | = 14.x before 14.1.1 | No fix listed |
| VMware Workstation | = 12.x | No fix listed |
| VMware Fusion | = 10.x before 10.1.1 | No fix listed |
| VMware Fusion | = 8.x | No fix listed |
References
- 103431 third-party-advisory vdb-entry
- 1040539 third-party-advisory vdb-entry
- www.vmware.com vendor-advisory