CVE-2019-5525

Description

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.101

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5525,CVE-2019-5526 are fixed in VMware Workstation 15 (15.1.0)	Windows
Vulnerabilities CVE-2019-5525,CVE-2019-5526,CVE-2020-3959 are fixed in VMware Player 15 (15.1.0)	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234