CVEvulnerability

CVE-2020-3999

6.5 MEDIUM Published 2020-12-21 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2020-12-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx process leading to a denial of service condition.

Affected configurations

• vmware workstation (>= 15.0.0 < 15.5.7) • vmware esxi 7.0 • vmware fusion (>= 11.5.0 < 11.5.7)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References