CVE-2020-3947
High
Description
VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition of the vmnetdhcp service running on the host machine.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Vmware Fusion
PublishedMar 16, 2020
First seenMar 16, 2020
How to fix
Update
- vmware fusion11.5.2 or later
- vmware workstation15.5.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware fusion | 11.0.0 < v < 11.5.2 | 11.5.2 |
| vmware workstation | 15.0.0 ≤ v < 15.5.2 | 15.5.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.