CVE-2018-6957

Description

VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.379

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.0.2Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.1.1Mac
Vulnerabilities CVE-2016-5330,CVE-2018-6957 are affected in VMware Fusion for MAC 8.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.2Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.3Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.4Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.5Mac
Vulnerabilities CVE-2017-4924,CVE-2017-4941,CVE-2017-5753,CVE-2018-6957 are affected in VMware Fusion for MAC 8.5Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.6Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.7Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 10.1.0Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5.8Mac
Vulnerabilities CVE-2018-6957 are affected in VMware Fusion for MAC 8.0Mac
Vulnerabilities CVE-2018-6957 are affected in VMware Fusion for MAC 8.5Mac
Vulnerabilities CVE-2017-4945,CVE-2018-6957 are affected in VMware Fusion for MAC 8.0Mac
Vulnerabilities CVE-2016-5330,CVE-2017-4945,CVE-2018-6957 are affected in VMware Fusion for MAC 8.1Mac
Multiple Vulnerabilities are affected in VMware Fusion for MAC 8.5Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)
PATCH-605160VMware Fusion for MAC 13.0.2 (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234