CVEvulnerability

CVE-2018-6963

5.5 MEDIUM Published 2018-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-476

Description

VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine.

Affected configurations

• vmware fusion (>= 10.0 < 10.1.2) • vmware workstation (>= 14.0 < 14.1.2)

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References