imPC@ndo IT

Tracker / CVE-2018-6977

CVE-2018-6977

Medium 6.5

VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive, and in some cases, possibly result other VMs on the host or the host itself becoming unresponsive.

Affected products and versions

vmware esxi
vmware fusion · 10.0.0 → 10.1.5
vmware fusion · 11.0.0 → 11.0.2
vmware workstation · 14.0.0 → 14.1.5
vmware workstation · 15.0.0 → 15.0.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References