VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive, and in some cases, possibly result other VMs on the host or the host itself becoming unresponsive.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/105549 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041821 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041822 | Third Party Advisory VDB Entry |
| https://www.vmware.com/security/advisories/VMSA-2018-0025.html | Mitigation Vendor Advisory |
| http://www.securityfocus.com/bid/105549 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041821 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041822 | Third Party Advisory VDB Entry |
| https://www.vmware.com/security/advisories/VMSA-2018-0025.html | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 04:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/105549 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1041821 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1041822 - Third Party Advisory, VDB Entry | |
| References | () https://www.vmware.com/security/advisories/VMSA-2018-0025.html - Mitigation, Vendor Advisory |
Information
Published : 2018-10-09 20:29
Updated : 2024-11-21 04:11
NVD link : CVE-2018-6977
Mitre link : CVE-2018-6977
CVE.ORG link : CVE-2018-6977
JSON object : View
Products Affected
vmware
- esxi
- workstation
- fusion
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')