Vulnerability-Lookup

CVE-2017-4934 (GCVE-0-2017-4934)

Vulnerability from cvelistv5 – Published: 2017-11-17 14:00 – Updated: 2024-09-16 20:47

Summary

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.

Severity

8.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

Heap buffer-overflow vulnerability

Assigner

vmware CNA under the mitre root

CNA scorecard C 64/100 over 254 records in the last 180 days details

References

3 references

URL	Tags
https://www.vmware.com/security/advisories/VMSA-2…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/101903	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039835	vdb-entryx_refsource_SECTRACK

Impacted products

2 products

Vendor	Product	Version	CPE status
VMware	Workstation	Affected: 12.x before 12.5.8	guessed
VMware	Fusion	Affected: 8.x before 8.5.9	guessed

Date Public

2017-11-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:47:43.413Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
          },
          {
            "name": "101903",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101903"
          },
          {
            "name": "1039835",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039835"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Workstation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "12.x before 12.5.8"
            }
          ]
        },
        {
          "product": "Fusion",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "8.x before 8.5.9"
            }
          ]
        }
      ],
      "datePublic": "2017-11-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Heap buffer-overflow vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-22T10:57:01.000Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
        },
        {
          "name": "101903",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101903"
        },
        {
          "name": "1039835",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039835"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@vmware.com",
          "DATE_PUBLIC": "2017-11-16T00:00:00",
          "ID": "CVE-2017-4934",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Workstation",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "12.x before 12.5.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Fusion",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "8.x before 8.5.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "VMware"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Heap buffer-overflow vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
            },
            {
              "name": "101903",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101903"
            },
            {
              "name": "1039835",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039835"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2017-4934",
    "datePublished": "2017-11-17T14:00:00.000Z",
    "dateReserved": "2016-12-26T00:00:00.000Z",
    "dateUpdated": "2024-09-16T20:47:54.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-4934",
      "date": "2026-10-13",
      "epss": "0.00436",
      "percentile": "0.36067"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "D38FB28D-8A42-4877-92AF-39EE04B14DB1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "180E48AF-AD42-4A00-948A-9C1D70BE53F9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "66C64A90-90A2-450A-8A79-AB69B5A939DC",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7E293B67-98C3-4D8E-883C-2F2F774AE6F0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
                  "matchCriteriaId": "838C7C08-15ED-4379-8A5B-9419D13AE7FF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "5C064187-0870-4672-9D64-92D643FA9C86",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "60F08698-0194-4892-9A46-93C53C0C660B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "287275D4-E311-4A1B-BC5C-2FB3A64691E0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ED552760-4DB1-4E56-B6C1-23E053858055",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "25BBD4C7-C851-4D40-B6DD-92873319CD28",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6759F732-8E65-49F7-B46C-B1E3F856B11D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "D91C182F-A8D2-4ABF-B202-261056EF93D1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "768A4D3B-CC19-4A3A-91D5-9C974F7F0247",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A0C5D443-A330-40DF-939B-10597147CE7A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "42BF8A2A-295D-44D6-A38E-D4C35437F380",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
                  "matchCriteriaId": "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "574DB25B-51E1-466A-8089-5108DB5D6FBD",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "0BF7F09F-D8B3-40AF-9111-E7C14832C5A0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "555DD10F-7EA8-4107-A31F-2C7CED41058D",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7EE4888B-156C-48BC-8035-3A0424CB6037",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6D4DA202-3D18-4DDC-89E4-81FFF68EDFD0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
        },
        {
          "lang": "es",
          "value": "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Fusion (en versiones 8.x anteriores a la 8.5.9) contienen una vulnerabilidad de desbordamiento de b\u00fafer basado en memoria din\u00e1mica (heap) en el dispositivo VMNAT. Este problema puede permitir que un invitado ejecute c\u00f3digo en el host."
        }
      ],
      "id": "CVE-2017-4934",
      "lastModified": "2024-11-21T03:26:42.023",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 7.2,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 10.0,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 2.0,
            "impactScore": 6.0,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2017-11-17T14:29:00.547",
      "references": [
        {
          "source": "security@vmware.com",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/101903"
        },
        {
          "source": "security@vmware.com",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securitytracker.com/id/1039835"
        },
        {
          "source": "security@vmware.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/101903"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securitytracker.com/id/1039835"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
        }
      ],
      "sourceIdentifier": "security@vmware.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-119"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D38FB28D-8A42-4877-92AF-39EE04B14DB1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "180E48AF-AD42-4A00-948A-9C1D70BE53F9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66C64A90-90A2-450A-8A79-AB69B5A939DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E293B67-98C3-4D8E-883C-2F2F774AE6F0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "838C7C08-15ED-4379-8A5B-9419D13AE7FF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5C064187-0870-4672-9D64-92D643FA9C86",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "60F08698-0194-4892-9A46-93C53C0C660B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "287275D4-E311-4A1B-BC5C-2FB3A64691E0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ED552760-4DB1-4E56-B6C1-23E053858055",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "25BBD4C7-C851-4D40-B6DD-92873319CD28",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6759F732-8E65-49F7-B46C-B1E3F856B11D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D91C182F-A8D2-4ABF-B202-261056EF93D1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "768A4D3B-CC19-4A3A-91D5-9C974F7F0247",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A0C5D443-A330-40DF-939B-10597147CE7A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "42BF8A2A-295D-44D6-A38E-D4C35437F380",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "574DB25B-51E1-466A-8089-5108DB5D6FBD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0BF7F09F-D8B3-40AF-9111-E7C14832C5A0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "555DD10F-7EA8-4107-A31F-2C7CED41058D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7EE4888B-156C-48BC-8035-3A0424CB6037",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6D4DA202-3D18-4DDC-89E4-81FFF68EDFD0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
          },
          {
            "lang": "es",
            "value": "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Fusion (en versiones 8.x anteriores a la 8.5.9) contienen una vulnerabilidad de desbordamiento de b\u00fafer basado en memoria din\u00e1mica (heap) en el dispositivo VMNAT. Este problema puede permitir que un invitado ejecute c\u00f3digo en el host."
          }
        ],
        "id": "CVE-2017-4934",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.2,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 6.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-11-17T14:29:00.547",
        "references": [
          {
            "source": "security@vmware.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/101903"
          },
          {
            "source": "security@vmware.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1039835"
          },
          {
            "source": "security@vmware.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/101903"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1039835"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
          }
        ],
        "sourceIdentifier": "security@vmware.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTFR-2017-AVI-417

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans VMware Workstation, Fusion et Horizon View Client. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
VMware	Fusion	NSX Edge versions 6.2.x antérieures à 6.2.9
VMware	Fusion	NSX Edge versions 6.3.x antérieures à 6.3.5
VMware	Fusion	Fusion versions 8.x sur OS X antérieures à 8.5.9
VMware	Fusion	Horizon View Client pour Windows versions 4.x antérieures à 4.6.1
VMware	Fusion	Workstation versions 12.x antérieures à 12.5.8

References

Title

Publication Time

CERTFR-2017-AVI-417

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
VMware	Fusion	NSX Edge versions 6.2.x antérieures à 6.2.9
VMware	Fusion	NSX Edge versions 6.3.x antérieures à 6.3.5
VMware	Fusion	Fusion versions 8.x sur OS X antérieures à 8.5.9
VMware	Fusion	Horizon View Client pour Windows versions 4.x antérieures à 4.6.1
VMware	Fusion	Workstation versions 12.x antérieures à 12.5.8

References

Title

Publication Time

BDU:2018-00065 (CVE-2017-4934)

Vulnerability from fstec – Published: 2018-01-18 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость службы VMware NAT гипервизоров VMware Workstation и Vmware Fusion, позволяющая нарушителю выполнить произвольный код на хостовой операционной системе

Summary

Уязвимость службы VMware NAT (vmnat.exe) гипервизоров VMware Workstation и Vmware Fusion вызвана выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему локально в гостевой операционной системе, выполнить произвольный код на хостовой операционной системе

Severity

7.2 (High) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:C/I:C/A:C

8.6 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-119 - Выход операции за границы буфера в памяти

Aliases

CVE-2017-4934, SECURITY, TRACKER, ID:1039835, BID, ID:101903

References

3 references

URL
http://www.securityfocus.com/bid/101903
http://www.securitytracker.com/id/1039835
https://www.vmware.com/security/advisories/VMSA-2017-0018.html

Impacted products

2 products from 1 vendor

Vendors

Broadcom Inc.

Products

VMWare Workstation, VMware Fusion

Versions

12.0.0 (VMWare Workstation), 12.0.1 (VMWare Workstation), 12.1 (VMWare Workstation), 12.1.1 (VMWare Workstation), 12.5 (VMWare Workstation), 12.5.1 (VMWare Workstation), 12.5.2 (VMWare Workstation), 12.5.3 (VMWare Workstation), 12.5.4 (VMWare Workstation), 12.5.5 (VMWare Workstation), 12.5.6 (VMWare Workstation), 12.5.7 (VMWare Workstation), 8.0.0 (VMware Fusion), 8.0.1 (VMware Fusion), 8.0.2 (VMware Fusion), 8.1.0 (VMware Fusion), 8.1.1 (VMware Fusion), 8.5.0 (VMware Fusion), 8.5.1 (VMware Fusion), 8.5.2 (VMware Fusion), 8.5.3 (VMware Fusion), 8.5.4 (VMware Fusion), 8.5.5 (VMware Fusion), 8.5.6 (VMware Fusion), 8.5.7 (VMware Fusion), 8.5.8 (VMware Fusion)

Product types

Virtualization software

Mitigations

Использование рекомендаций: https://www.vmware.com/security/advisories/VMSA-2017-0018.html

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Broadcom Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "12.0.0 (VMWare Workstation), 12.0.1 (VMWare Workstation), 12.1 (VMWare Workstation), 12.1.1 (VMWare Workstation), 12.5 (VMWare Workstation), 12.5.1 (VMWare Workstation), 12.5.2 (VMWare Workstation), 12.5.3 (VMWare Workstation), 12.5.4 (VMWare Workstation), 12.5.5 (VMWare Workstation), 12.5.6 (VMWare Workstation), 12.5.7 (VMWare Workstation), 8.0.0 (VMware Fusion), 8.0.1 (VMware Fusion), 8.0.2 (VMware Fusion), 8.1.0 (VMware Fusion), 8.1.1 (VMware Fusion), 8.5.0 (VMware Fusion), 8.5.1 (VMware Fusion), 8.5.2 (VMware Fusion), 8.5.3 (VMware Fusion), 8.5.4 (VMware Fusion), 8.5.5 (VMware Fusion), 8.5.6 (VMware Fusion), 8.5.7 (VMware Fusion), 8.5.8 (VMware Fusion)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: \nhttps://www.vmware.com/security/advisories/VMSA-2017-0018.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.11.2017",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "18.01.2018",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2018-00065",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2017-4934, Security Tracker ID:1039835, BID ID:101903",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "VMWare Workstation, VMware Fusion",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b VMware NAT \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 VMware Workstation \u0438 Vmware Fusion, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b VMware NAT (vmnat.exe) \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 VMware Workstation \u0438 Vmware Fusion \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.securityfocus.com/bid/101903\nhttp://www.securitytracker.com/id/1039835\nhttps://www.vmware.com/security/advisories/VMSA-2017-0018.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,6)"
}

CNVD-2017-37530

Vulnerability from cnvd - Published: 2017-12-19

Title

VMware Workstation和Fusion堆缓冲区溢出漏洞

Description

VMWare Workstation和Fusion都是美国威睿（VMware）公司的桌面虚拟计算机软件，前者提供可以同时运行多个不同的操作系统的虚拟机功能，后者是用于在苹果机（Mac）上运行Windows应用程序的虚拟机软件。 VMware Workstation 12.5.8之前的12.x版本和Fusion 8.5.9之前的8.x版本存在堆缓冲区溢出漏洞。攻击者可利用该漏洞在主机上执行代码。

Severity

高

Patch Name

VMware Workstation和Fusion堆缓冲区溢出漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://www.vmware.com/security/advisories/VMSA-2017-0018.html

Reference

https://www.vmware.com/security/advisories/VMSA-2017-0018.html http://www.securityfocus.com/bid/101903

Impacted products

Name
['VMware Fusion 8.x，<8.5.9', 'VMware Workstation 12.*，<12.5.8']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "101903"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-4934"
    }
  },
  "description": "VMWare Workstation\u548cFusion\u90fd\u662f\u7f8e\u56fd\u5a01\u777f\uff08VMware\uff09\u516c\u53f8\u7684\u684c\u9762\u865a\u62df\u8ba1\u7b97\u673a\u8f6f\u4ef6\uff0c\u524d\u8005\u63d0\u4f9b\u53ef\u4ee5\u540c\u65f6\u8fd0\u884c\u591a\u4e2a\u4e0d\u540c\u7684\u64cd\u4f5c\u7cfb\u7edf\u7684\u865a\u62df\u673a\u529f\u80fd\uff0c\u540e\u8005\u662f\u7528\u4e8e\u5728\u82f9\u679c\u673a\uff08Mac\uff09\u4e0a\u8fd0\u884cWindows\u5e94\u7528\u7a0b\u5e8f\u7684\u865a\u62df\u673a\u8f6f\u4ef6\u3002\r\n\r\nVMware Workstation 12.5.8\u4e4b\u524d\u768412.x\u7248\u672c\u548cFusion 8.5.9\u4e4b\u524d\u76848.x\u7248\u672c\u5b58\u5728\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u4e3b\u673a\u4e0a\u6267\u884c\u4ee3\u7801\u3002",
  "discovererName": "Jun Mao of Tencent PC Manager working with Trend Micro\u0027s Zero Day Initiative.",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.vmware.com/security/advisories/VMSA-2017-0018.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-37530",
  "openTime": "2017-12-19",
  "patchDescription": "VMWare Workstation\u548cFusion\u90fd\u662f\u7f8e\u56fd\u5a01\u777f\uff08VMware\uff09\u516c\u53f8\u7684\u684c\u9762\u865a\u62df\u8ba1\u7b97\u673a\u8f6f\u4ef6\uff0c\u524d\u8005\u63d0\u4f9b\u53ef\u4ee5\u540c\u65f6\u8fd0\u884c\u591a\u4e2a\u4e0d\u540c\u7684\u64cd\u4f5c\u7cfb\u7edf\u7684\u865a\u62df\u673a\u529f\u80fd\uff0c\u540e\u8005\u662f\u7528\u4e8e\u5728\u82f9\u679c\u673a\uff08Mac\uff09\u4e0a\u8fd0\u884cWindows\u5e94\u7528\u7a0b\u5e8f\u7684\u865a\u62df\u673a\u8f6f\u4ef6\u3002\r\n\r\nVMware Workstation 12.5.8\u4e4b\u524d\u768412.x\u7248\u672c\u548cFusion 8.5.9\u4e4b\u524d\u76848.x\u7248\u672c\u5b58\u5728\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u4e3b\u673a\u4e0a\u6267\u884c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "VMware Workstation\u548cFusion\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "VMware Fusion 8.x\uff0c\u003c8.5.9",
      "VMware Workstation 12.*\uff0c\u003c12.5.8"
    ]
  },
  "referenceLink": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html\r\nhttp://www.securityfocus.com/bid/101903",
  "serverity": "\u9ad8",
  "submitTime": "2017-11-20",
  "title": "VMware Workstation\u548cFusion\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e"
}

FKIE_CVE-2017-4934

Vulnerability from fkie_nvd - Published: 2017-11-17 14:29 - Updated: 2026-06-17 01:19

Severity

8.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Summary

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.

References

URL	Tags
security@vmware.com	http://www.securityfocus.com/bid/101903	Third Party Advisory, VDB Entry
security@vmware.com	http://www.securitytracker.com/id/1039835	Third Party Advisory, VDB Entry
security@vmware.com	https://www.vmware.com/security/advisories/VMSA-2017-0018.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/101903	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1039835	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://www.vmware.com/security/advisories/VMSA-2017-0018.html	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
vmware	workstation	12.0.0
vmware	workstation	12.0.1
vmware	workstation	12.1
vmware	workstation	12.1.1
vmware	workstation	12.5
vmware	workstation	12.5.1
vmware	workstation	12.5.2
vmware	workstation	12.5.3
vmware	workstation	12.5.4
vmware	workstation	12.5.5
vmware	workstation	12.5.6
vmware	workstation	12.5.7
vmware	fusion	8.0.0
vmware	fusion	8.0.1
vmware	fusion	8.0.2
vmware	fusion	8.1.0
vmware	fusion	8.1.1
vmware	fusion	8.5.0
vmware	fusion	8.5.1
vmware	fusion	8.5.2
vmware	fusion	8.5.3
vmware	fusion	8.5.4
vmware	fusion	8.5.5
vmware	fusion	8.5.6
vmware	fusion	8.5.7
vmware	fusion	8.5.8

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Workstation",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "12.x before 12.5.8"
            }
          ]
        },
        {
          "product": "Fusion",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "8.x before 8.5.9"
            }
          ]
        }
      ],
      "source": "security@vmware.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C4C2CB0-9A2B-46B2-9E75-2BADAE722BB0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D38FB28D-8A42-4877-92AF-39EE04B14DB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "180E48AF-AD42-4A00-948A-9C1D70BE53F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "66C64A90-90A2-450A-8A79-AB69B5A939DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE6B9B4F-53C5-4B47-89C4-AD221DC91D44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E293B67-98C3-4D8E-883C-2F2F774AE6F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB307F39-3A90-4B62-B2BF-0E0CEBBBBC9F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "838C7C08-15ED-4379-8A5B-9419D13AE7FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C064187-0870-4672-9D64-92D643FA9C86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "60F08698-0194-4892-9A46-93C53C0C660B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "287275D4-E311-4A1B-BC5C-2FB3A64691E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED552760-4DB1-4E56-B6C1-23E053858055",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "25BBD4C7-C851-4D40-B6DD-92873319CD28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6759F732-8E65-49F7-B46C-B1E3F856B11D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D91C182F-A8D2-4ABF-B202-261056EF93D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "768A4D3B-CC19-4A3A-91D5-9C974F7F0247",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0C5D443-A330-40DF-939B-10597147CE7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "42BF8A2A-295D-44D6-A38E-D4C35437F380",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC08D3D5-5D46-45C7-BD43-81E1D18FAB31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "574DB25B-51E1-466A-8089-5108DB5D6FBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BF7F09F-D8B3-40AF-9111-E7C14832C5A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "555DD10F-7EA8-4107-A31F-2C7CED41058D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EE4888B-156C-48BC-8035-3A0424CB6037",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D4DA202-3D18-4DDC-89E4-81FFF68EDFD0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
    },
    {
      "lang": "es",
      "value": "VMware Workstation (en versiones 12.x anteriores a la 12.5.8) y Fusion (en versiones 8.x anteriores a la 8.5.9) contienen una vulnerabilidad de desbordamiento de b\u00fafer basado en memoria din\u00e1mica (heap) en el dispositivo VMNAT. Este problema puede permitir que un invitado ejecute c\u00f3digo en el host."
    }
  ],
  "id": "CVE-2017-4934",
  "lastModified": "2026-06-17T01:19:35.677",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-11-17T14:29:00.547",
  "references": [
    {
      "source": "security@vmware.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/101903"
    },
    {
      "source": "security@vmware.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039835"
    },
    {
      "source": "security@vmware.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/101903"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039835"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
    }
  ],
  "sourceIdentifier": "security@vmware.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-Q49M-WXHV-W23W

Vulnerability from github – Published: 2022-05-17 00:18 – Updated: 2022-05-17 00:18

Details

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.

Severity

8.8 (High)


                  
                    CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-4934"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-11-17T14:29:00Z",
    "severity": "HIGH"
  },
  "details": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.",
  "id": "GHSA-q49m-wxhv-w23w",
  "modified": "2022-05-17T00:18:39Z",
  "published": "2022-05-17T00:18:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-4934"
    },
    {
      "type": "WEB",
      "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/101903"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1039835"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2017-4934

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.

Aliases

CVE-2017-4934

Aliases

CVE-2017-4934

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-4934",
    "description": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.",
    "id": "GSD-2017-4934"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-4934"
      ],
      "details": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.",
      "id": "GSD-2017-4934",
      "modified": "2023-12-13T01:21:02.675714Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@vmware.com",
        "DATE_PUBLIC": "2017-11-16T00:00:00",
        "ID": "CVE-2017-4934",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Workstation",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "12.x before 12.5.8"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Fusion",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "8.x before 8.5.9"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "VMware"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Heap buffer-overflow vulnerability"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
            "refsource": "CONFIRM",
            "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
          },
          {
            "name": "101903",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/101903"
          },
          {
            "name": "1039835",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1039835"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation:12.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.5.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@vmware.com",
          "ID": "CVE-2017-4934"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://www.vmware.com/security/advisories/VMSA-2017-0018.html"
            },
            {
              "name": "1039835",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1039835"
            },
            {
              "name": "101903",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/101903"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 2.0,
          "impactScore": 6.0
        }
      },
      "lastModifiedDate": "2017-12-03T17:36Z",
      "publishedDate": "2017-11-17T14:29Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2017-4934 (GCVE-0-2017-4934)

CERTFR-2017-AVI-417

Solution

CERTFR-2017-AVI-417

Solution

BDU:2018-00065 (CVE-2017-4934)

CNVD-2017-37530

FKIE_CVE-2017-4934

GHSA-Q49M-WXHV-W23W

GSD-2017-4934

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour