CVE-2017-4938

Description

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.046

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.2Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.1.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.1.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.2Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.3Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.4Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.5Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.6Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.7Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.8Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234