CVE-2016-5329

{"id": "CVE-2016-5329", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2016-12-29T09:59:00.227", "references": [{"url": "http://www.securityfocus.com/bid/93888", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1037103", "source": "cve@mitre.org"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2016-0017.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/93888", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1037103", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2016-0017.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors."}, {"lang": "es", "value": "VMware Fusion 8.x en versiones anteriores a 8.5 en OS X, cuando System Integrity Protection (SIP) est\u00e1 habilitado, permite a usuarios locales determinar las direcciones de memoria del kernel y eludir el mecanismo de protecci\u00f3n kASLR a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:54:06.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25BBD4C7-C851-4D40-B6DD-92873319CD28"}, {"criteria": "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0"}, {"criteria": "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6759F732-8E65-49F7-B46C-B1E3F856B11D"}, {"criteria": "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF"}, {"criteria": "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D91C182F-A8D2-4ABF-B202-261056EF93D1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}