CVEvulnerability
CVE-2019-5525
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-06-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.
Affected configurations
• vmware workstation (>= 15.0.0 < 15.1.0)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://www.securityfocus.com/bid/108674 Third Party Advisory, VDB Entry
- https://www.vmware.com/security/advisories/VMSA-2019-0009.html Vendor Advisory
- http://www.securityfocus.com/bid/108674 Third Party Advisory, VDB Entry
- https://www.vmware.com/security/advisories/VMSA-2019-0009.html Vendor Advisory