5.5med
CVE-2018-6963
VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due t…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 33%
Public exploits
0
none known
Summary
VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine.
Exploit prediction (EPSS)
0.39% probability of exploitation in the next 30 days, higher than 33% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Affected products
- VMware Workstation
- VMware Fusion
Classification
- Weakness
- CWE-476 NULL Pointer Dereference
- Technology feeds
- VMware (RSS, critical only)
References
- securityfocus.com /bid/104237 · vdb-entry, x_refsource_BID, x_transferred
- securitytracker.com /id/1040957 · vdb-entry, x_refsource_SECTRACK, x_transferred
- vmware.com /security/advisories/VMSA-2018-0013.html · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-6963
- NVD: CVE-2018-6963
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.