VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ESXi
Vendor
n/a
Product
ESXi
Platforms
Unknown
Default status
unaffected
ESXi · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0
affected
custom
ESXi80U3d-24585383
Unavailable
None listed
8.0
affected
custom
ESXi80U2d-24585300
Unavailable
None listed
7.0
affected
custom
ESXi70U3s-24585291
Unavailable
None listed
VMware Workstation
Vendor
n/a
Product
VMware Workstation
Platforms
Windows
Linux
Default status
unaffected
VMware Workstation · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.x
affected
custom
17.6.3
Unavailable
None listed
VMware Fusion
Vendor
n/a
Product
VMware Fusion
Platforms
MacOS
Default status
unaffected
VMware Fusion · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.x
affected
custom
13.6.3
Unavailable
None listed
VMware Cloud Foundation
Vendor
n/a
Product
VMware Cloud Foundation
Platforms
Unknown
Default status
unaffected
VMware Cloud Foundation · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x, 4.5.x
affected
Unavailable
Unavailable
Unavailable
None listed
VMware Telco Cloud Platform
Vendor
n/a
Product
VMware Telco Cloud Platform
Platforms
Unknown
Default status
unaffected
VMware Telco Cloud Platform · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x, 4.x, 3.x, 2.x
affected
Unavailable
Unavailable
Unavailable
None listed
VMware Telco Cloud Infrastructure
Vendor
n/a
Product
VMware Telco Cloud Infrastructure
Platforms
Unknown
Default status
unaffected
VMware Telco Cloud Infrastructure · Scoped product and version facts