CVEvulnerability

CVE-2018-6957

5.3 MEDIUM Published 2018-03-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
Weaknesses
CWE-772

Description

VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.

Affected configurations

• vmware workstation pro (>= 14.0 < 14.1.1) • vmware workstation pro 12.0 • vmware workstation pro 12.1 • vmware workstation pro 12.01 • vmware workstation pro 12.1.1 • vmware workstation pro 12.5 • vmware workstation pro 12.5.1 • vmware workstation pro 12.5.2 • vmware workstation pro 12.5.3 • vmware workstation pro 12.5.4 • vmware workstation pro 12.5.5 • vmware workstation pro 12.5.6 • vmware workstation pro 12.5.7 • vmware workstation player (>= 14.0 < 14.1.1) • vmware workstation player 12.0 • vmware workstation player 12.0.1 • vmware workstation player 12.1 • vmware workstation player 12.1.1 • vmware workstation player 12.5 • vmware workstation player 12.5.1 • vmware workstation player 12.5.2 • vmware workstation player 12.5.3 • vmware workstation player 12.5.4 • vmware workstation player 12.5.5 • vmware workstation player 12.5.6 • vmware workstation player 12.5.7 • vmware fusion 8.0 • vmware fusion 8.0.1 • vmware fusion 8.0.2 • vmware fusion 8.1 • vmware fusion 8.1.1 • vmware fusion 8.5 • vmware fusion 8.5.1 • vmware fusion 8.5.2 • vmware fusion 8.5.3 • vmware fusion 8.5.4 • vmware fusion 8.5.5 • vmware fusion 8.5.6 • vmware fusion 8.5.7 • vmware fusion 8.5.8 • vmware fusion (>= 10.0 < 10.1.1)

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References