Non notée
CVE-2017-4904 The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG,…
Description
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Denial of Service of the guest on ESXi 5.5.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ESXi | Versions non publiées | |
| Workstation Pro / Player | Versions non publiées | |
| Fusion Pro / Fusion | Versions non publiées |
Références
- 97165 www.securityfocus.com
- www.vmware.com www.vmware.com
- 1038148 www.securitytracker.com
- 1038149 www.securitytracker.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de ESXi
Les 29 CVE de ESXi →
CVE-2025-41239
VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage…
7.1
Élevée
CVE-2025-41238
VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI (Paravirtualized SCSI)…
9.3
Critique
CVE-2025-41237
VMCI integer-underflow vulnerability
9.3
Critique
CVE-2025-41236
VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A…
9.3
Critique