| Package | Affected versions | Patched versions |
|---|---|---|
| fusion | ≥ 8.0.0, < 8.5.4 | 8.5.4 |
| workstation | ≥ 12.0.0, < 12.5.3 | 12.5.3 |
| workstation pro | ≥ 12.0.0, < 12.5.3 | 12.5.3 |
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free