CVE-2017-4941
Description
VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a stack overflow via a specific set of VNC packets. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall.
How to fix
- vmware fusion8.5.9 or later
- vmware workstation12.5.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware fusion | 8.0.0 ≤ v < 8.5.9 | 8.5.9 |
| vmware workstation | 12.0.0 ≤ v < 12.5.8 | 12.5.8 |
| vmware esxi | 5.5, 6.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.