Description (CNA)
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes communicating with vSockets.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / ESXi | affected 8.0 before ESXi80U3f-24784735; affected 8.0 before ESXi80U2e-24789317; affected 7.0 before ESXi70U3w-24784741 |
| VMware / Cloud Foundation | affected 5.x, 4.5.x |
| VMware / Workstation | affected 17.x before 17.6.4 |
| VMware / Fusion | affected 13.x before 13.6.4 |
| VMware / Telco Cloud Platform | affected 5.x, 4.x, 3.x, 2.x |
| VMware / Telco Cloud Infrastructure | affected 3.x, 2.x |
| VMware / Tools | affected 13.x.x before 13.0.1.0; affected 12.x.x, 11.x.x, before 12.5.3 |
CWE
CWE-908
References
ADP enrichment
No English description supplied.
No references supplied.