VMware ESXi, Workstation, and Fusion contain an integer-overflow vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not affected by this issue.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ESXi
Vendor
VMware
Product
ESXi
Platforms
Unknown
Default status
unaffected
ESXi · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0
affected
custom
ESXi80U3f-24784735
Unavailable
None listed
8.0
affected
custom
ESXi80U2e-24789317
Unavailable
None listed
7.0
affected
custom
ESXi70U3w-24784741
Unavailable
None listed
Cloud Foundation
Vendor
VMware
Product
Cloud Foundation
Platforms
Unknown
Default status
unaffected
Cloud Foundation · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x, 4.5.x
affected
Unavailable
Unavailable
Unavailable
None listed
Workstation
Vendor
VMware
Product
Workstation
Platforms
Unknown
Default status
unaffected
Workstation · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
17.x
affected
custom
17.6.4
Unavailable
None listed
Fusion
Vendor
VMware
Product
Fusion
Platforms
Unknown
Default status
unaffected
Fusion · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.x
affected
custom
Unavailable
13.6.4
None listed
Telco Cloud Platform
Vendor
VMware
Product
Telco Cloud Platform
Platforms
Unknown
Default status
unaffected
Telco Cloud Platform · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x, 4.x, 3.x, 2.x
affected
Unavailable
Unavailable
Unavailable
None listed
Telco Cloud Infrastructure
Vendor
VMware
Product
Telco Cloud Infrastructure
Platforms
Unknown
Default status
unaffected
Telco Cloud Infrastructure · Scoped product and version facts