CVE-2018-6957
15.03.2018, 19:29
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vmware | workstation_pro | 14.0 ≤ 𝑥 < 14.1.1 |
| vmware | workstation_pro | 12.0 |
| vmware | workstation_pro | 12.1 |
| vmware | workstation_pro | 12.01 |
| vmware | workstation_pro | 12.1.1 |
| vmware | workstation_pro | 12.5 |
| vmware | workstation_pro | 12.5.1 |
| vmware | workstation_pro | 12.5.2 |
| vmware | workstation_pro | 12.5.3 |
| vmware | workstation_pro | 12.5.4 |
| vmware | workstation_pro | 12.5.5 |
| vmware | workstation_pro | 12.5.6 |
| vmware | workstation_pro | 12.5.7 |
| vmware | workstation_player | 14.0 ≤ 𝑥 < 14.1.1 |
| vmware | workstation_player | 12.0 |
| vmware | workstation_player | 12.0.1 |
| vmware | workstation_player | 12.1 |
| vmware | workstation_player | 12.1.1 |
| vmware | workstation_player | 12.5 |
| vmware | workstation_player | 12.5.1 |
| vmware | workstation_player | 12.5.2 |
| vmware | workstation_player | 12.5.3 |
| vmware | workstation_player | 12.5.4 |
| vmware | workstation_player | 12.5.5 |
| vmware | workstation_player | 12.5.6 |
| vmware | workstation_player | 12.5.7 |
| vmware | fusion | 8.0 |
| vmware | fusion | 8.0.1 |
| vmware | fusion | 8.0.2 |
| vmware | fusion | 8.1 |
| vmware | fusion | 8.1.1 |
| vmware | fusion | 8.5 |
| vmware | fusion | 8.5.1 |
| vmware | fusion | 8.5.2 |
| vmware | fusion | 8.5.3 |
| vmware | fusion | 8.5.4 |
| vmware | fusion | 8.5.5 |
| vmware | fusion | 8.5.6 |
| vmware | fusion | 8.5.7 |
| vmware | fusion | 8.5.8 |
| vmware | fusion | 10.0 ≤ 𝑥 < 10.1.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| vmware | workstation | 12.0 ≤ 𝑥 < 13.0 | CNA |
| vmware | workstation | 8.0 ≤ 𝑥 < 9.0 | CNA |
Common Weakness Enumeration