VMware ESXi/Workstation/Fusion vmxnet3 Virtual Network Adapter out-of-bounds write

A vulnerability was found in VMware ESXi, Workstation and Fusion (Virtualization Software) (affected version not known) and classified as problematic. Affected by this issue is an unknown code of the component vmxnet3 Virtual Network Adapter. Upgrading eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561935	10/27/2020	VulD...	confirm_url	https://www.vmware.com/security/advisories/VMSA-2020-0015.html	cve.mitre.org	10/27/2020	accepted	70
10201692	06/26/2020	VulD...	cve_nvd_summary	VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.	mitre.org	06/26/2020	accepted	100
10201691	06/26/2020	VulD...	cve_assigned	1577664000	mitre.org	06/26/2020	accepted	100
10201685	06/26/2020	VulD...	cvss3_nvd_a	N	nist.gov	06/26/2020	accepted	100
10201684	06/26/2020	VulD...	cvss3_nvd_i	N	nist.gov	06/26/2020	accepted	100
10201683	06/26/2020	VulD...	cvss3_nvd_c	H	nist.gov	06/26/2020	accepted	100
10201682	06/26/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/26/2020	accepted	100
10201681	06/26/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/26/2020	accepted	100
10201680	06/26/2020	VulD...	cvss3_nvd_pr	L	nist.gov	06/26/2020	accepted	100
10201679	06/26/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/26/2020	accepted	100
10201678	06/26/2020	VulD...	cvss3_nvd_av	L	nist.gov	06/26/2020	accepted	100
10201665	06/26/2020	VulD...	cvss2_nvd_ai	N	nist.gov	06/26/2020	accepted	100
10201664	06/26/2020	VulD...	cvss2_nvd_ii	N	nist.gov	06/26/2020	accepted	100
10201663	06/26/2020	VulD...	cvss2_nvd_ci	P	nist.gov	06/26/2020	accepted	100
10201662	06/26/2020	VulD...	cvss2_nvd_au	N	nist.gov	06/26/2020	accepted	100
10201661	06/26/2020	VulD...	cvss2_nvd_ac	L	nist.gov	06/26/2020	accepted	100
10201660	06/26/2020	VulD...	cvss2_nvd_av	L	nist.gov	06/26/2020	accepted	100
10201650	06/26/2020	VulD...	cwe	787 (memory corruption)		06/26/2020	accepted	100
10201646	06/26/2020	VulD...	type	Virtualization Software		06/26/2020	accepted	100
10201701	06/26/2020	VulD...	cvss3_nvd_basescore	5.5	nist.gov	06/26/2020	accepted	90