CVE-2017-4938
At a glance Severity Not available EPSS EPSS 0.37 % · percentile 30 (2026-10-27) State PUBLISHED Published 2017-11-17 Updated 2024-09-17 Assigner vmware NVD status Modified Description VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 LOW 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*Affected products
References
Sources
