CVE-2017-4938

MÉDIO 6.5CVE-2017-4938 · Published 17/11/2017 · updated 17/06/2026

Em resumo

CVE-2017-4938 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta fusion (vmware), workstation (vmware).
Chance de exploração nos próximos 30 dias (EPSS): 0.37%, maior que 30.5% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
fusion vmware	`= 8.0.0= 8.0.1= 8.0.2= 8.1.0= 8.1.1= 8.5.0= 8.5.1= 8.5.2= 8.5.3= 8.5.4= 8.5.5= 8.5.6= 8.5.7= 8.5.8`	No fix yet
workstation vmware	`= 12.0.0= 12.0.1= 12.1= 12.1.1= 12.5= 12.5.1= 12.5.2= 12.5.3= 12.5.4= 12.5.5= 12.5.6= 12.5.7`	No fix yet

Description

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

References

securityfocus.com/bid/101887 · Third Party Advisory
securitytracker.com/id/1039835 · Third Party Advisory
vmware.com/security/advisories/VMSA-2017-0018.html · Patch

Mais vulnerabilidades de fusion

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fusion

vmware

= 8.0.0= 8.0.1= 8.0.2= 8.1.0= 8.1.1= 8.5.0= 8.5.1= 8.5.2= 8.5.3= 8.5.4= 8.5.5= 8.5.6= 8.5.7= 8.5.8

No fix yet

workstation

vmware

= 12.0.0= 12.0.1= 12.1= 12.1.1= 12.5= 12.5.1= 12.5.2= 12.5.3= 12.5.4= 12.5.5= 12.5.6= 12.5.7

No fix yet

Mais vulnerabilidades de fusion

Ver tudo →