CVE-2017-4938
En bref Sévérité Non disponible EPSS EPSS 0.37 % · centile 30 (2026-10-27) État PUBLISHED Publiée 2017-11-17 Mise à jour 2024-09-17 Attribuée par vmware Statut NVD Modified
Description VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Scores Version Score Vecteur Évalué par CVSS 3.0 MEDIUM 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 LOW 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*
Produits affectés
Références
Sources