VMware ESXi/Workstation/Fusion Shader out-of-bounds read

A vulnerability has been found in VMware ESXi, Workstation and Fusion (Virtualization Software) (affected version unknown) and classified as problematic. Affected by this vulnerability is an unknown part of the component Shader Handler. Upgrading eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561934	10/27/2020	VulD...	confirm_url	https://www.vmware.com/security/advisories/VMSA-2020-0015.html	cve.mitre.org	10/27/2020	accepted	70
10201636	06/26/2020	VulD...	cve_nvd_summary	VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition.	mitre.org	06/26/2020	accepted	100
10201635	06/26/2020	VulD...	cve_assigned	1577664000	mitre.org	06/26/2020	accepted	100
10201629	06/26/2020	VulD...	cvss3_nvd_a	L	nist.gov	06/26/2020	accepted	100
10201628	06/26/2020	VulD...	cvss3_nvd_i	N	nist.gov	06/26/2020	accepted	100
10201627	06/26/2020	VulD...	cvss3_nvd_c	N	nist.gov	06/26/2020	accepted	100
10201626	06/26/2020	VulD...	cvss3_nvd_s	C	nist.gov	06/26/2020	accepted	100
10201625	06/26/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/26/2020	accepted	100
10201624	06/26/2020	VulD...	cvss3_nvd_pr	L	nist.gov	06/26/2020	accepted	100
10201623	06/26/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/26/2020	accepted	100
10201622	06/26/2020	VulD...	cvss3_nvd_av	L	nist.gov	06/26/2020	accepted	100
10201609	06/26/2020	VulD...	cvss2_nvd_ai	P	nist.gov	06/26/2020	accepted	100
10201608	06/26/2020	VulD...	cvss2_nvd_ii	N	nist.gov	06/26/2020	accepted	100
10201607	06/26/2020	VulD...	cvss2_nvd_ci	N	nist.gov	06/26/2020	accepted	100
10201606	06/26/2020	VulD...	cvss2_nvd_au	N	nist.gov	06/26/2020	accepted	100
10201605	06/26/2020	VulD...	cvss2_nvd_ac	M	nist.gov	06/26/2020	accepted	100
10201604	06/26/2020	VulD...	cvss2_nvd_av	L	nist.gov	06/26/2020	accepted	100
10201594	06/26/2020	VulD...	cwe	125 (information disclosure)		06/26/2020	accepted	100
10201590	06/26/2020	VulD...	type	Virtualization Software		06/26/2020	accepted	100
10201645	06/26/2020	VulD...	cvss3_nvd_basescore	3.8	nist.gov	06/26/2020	accepted	90