CVE-2017-4903
07.06.2017, 18:29
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have an uninitialized stack memory usage in SVGA. This issue may allow a guest to execute code on the host.Enginsight
| Vendor | Product | Version |
|---|---|---|
| vmware | workstation_player | 12.0.0 ≤ 𝑥 < 12.5.5 |
| vmware | workstation_pro | 12.0.0 ≤ 𝑥 < 12.5.5 |
| vmware | esxi | 5.5 |
| vmware | esxi | 5.5:1 |
| vmware | esxi | 5.5:2 |
| vmware | esxi | 5.5:3a |
| vmware | esxi | 5.5:3b |
| vmware | esxi | 6.0 |
| vmware | esxi | 6.0:1 |
| vmware | esxi | 6.0:1a |
| vmware | esxi | 6.0:1b |
| vmware | esxi | 6.0:2 |
| vmware | esxi | 6.0:3 |
| vmware | esxi | 6.0:3a |
| vmware | esxi | 6.0:600-201504401 |
| vmware | esxi | 6.0:600-201505401 |
| vmware | esxi | 6.0:600-201507101 |
| vmware | esxi | 6.0:600-201507102 |
| vmware | esxi | 6.0:600-201507401 |
| vmware | esxi | 6.0:600-201507402 |
| vmware | esxi | 6.0:600-201507403 |
| vmware | esxi | 6.0:600-201507404 |
| vmware | esxi | 6.0:600-201507405 |
| vmware | esxi | 6.0:600-201507406 |
| vmware | esxi | 6.0:600-201507407 |
| vmware | esxi | 6.0:600-201509101 |
| vmware | esxi | 6.0:600-201509102 |
| vmware | esxi | 6.0:600-201509201 |
| vmware | esxi | 6.0:600-201509202 |
| vmware | esxi | 6.0:600-201509203 |
| vmware | esxi | 6.0:600-201509204 |
| vmware | esxi | 6.0:600-201509205 |
| vmware | esxi | 6.0:600-201509206 |
| vmware | esxi | 6.0:600-201509207 |
| vmware | esxi | 6.0:600-201509208 |
| vmware | esxi | 6.0:600-201509209 |
| vmware | esxi | 6.0:600-201509210 |
| vmware | esxi | 6.0:600-201510401 |
| vmware | esxi | 6.0:600-201511401 |
| vmware | esxi | 6.0:600-201601101 |
| vmware | esxi | 6.0:600-201601102 |
| vmware | esxi | 6.0:600-201601401 |
| vmware | esxi | 6.0:600-201601402 |
| vmware | esxi | 6.0:600-201601403 |
| vmware | esxi | 6.0:600-201601404 |
| vmware | esxi | 6.0:600-201601405 |
| vmware | esxi | 6.0:600-201602401 |
| vmware | esxi | 6.0:600-201603101 |
| vmware | esxi | 6.0:600-201603102 |
| vmware | esxi | 6.0:600-201603201 |
| vmware | esxi | 6.0:600-201603202 |
| vmware | esxi | 6.0:600-201603203 |
| vmware | esxi | 6.0:600-201603204 |
| vmware | esxi | 6.0:600-201603205 |
| vmware | esxi | 6.0:600-201603206 |
| vmware | esxi | 6.0:600-201603207 |
| vmware | esxi | 6.0:600-201603208 |
| vmware | esxi | 6.0:600-201605401 |
| vmware | esxi | 6.0:600-201608101 |
| vmware | esxi | 6.0:600-201608401 |
| vmware | esxi | 6.0:600-201608402 |
| vmware | esxi | 6.0:600-201608403 |
| vmware | esxi | 6.0:600-201608404 |
| vmware | esxi | 6.0:600-201608405 |
| vmware | esxi | 6.0:600-201610410 |
| vmware | esxi | 6.0:600-201611401 |
| vmware | esxi | 6.0:600-201611402 |
| vmware | esxi | 6.0:600-201611403 |
| vmware | esxi | 6.0:600-201702101 |
| vmware | esxi | 6.0:600-201702102 |
| vmware | esxi | 6.0:600-201702201 |
| vmware | esxi | 6.0:600-201702202 |
| vmware | esxi | 6.0:600-201702203 |
| vmware | esxi | 6.0:600-201702204 |
| vmware | esxi | 6.0:600-201702205 |
| vmware | esxi | 6.0:600-201702206 |
| vmware | esxi | 6.0:600-201702207 |
| vmware | esxi | 6.0:600-201702208 |
| vmware | esxi | 6.0:600-201702209 |
| vmware | esxi | 6.0:600-201702210 |
| vmware | esxi | 6.0:600-201702211 |
| vmware | esxi | 6.0:600-201702212 |
| vmware | esxi | 6.5 |
| vmware | esxi | 6.5:650-201701001 |
| vmware | esxi | 6.5:650-201703001 |
| vmware | esxi | 6.5:650-201703002 |
| vmware | fusion | 8.0.0 ≤ 𝑥 < 8.5.6 |
| vmware | fusion_pro | 8.0.0 ≤ 𝑥 < 8.5.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References