CVE-2018-6963
Last modified
CVE-2018-6963 is a vulnerability of currently unknown severity. VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine trigger a denial-of-Service of their guest machine.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Fusion | >= 10.0, < 10.1.2 |
| Vmware | Workstation | >= 14.0, < 14.1.2 |
References
- http://www.securityfocus.com/bid/104237Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040957Third Party Advisory, VDB Entry
- https://www.vmware.com/security/advisories/VMSA-2018-0013.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/104237Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040957Third Party Advisory, VDB Entry
- https://www.vmware.com/security/advisories/VMSA-2018-0013.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-6963?
How severe is CVE-2018-6963?
How do I fix CVE-2018-6963?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-6957VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10…
- CVE-2018-6958VMware vRealize Automation (vRA) prior to 7.3.1 contains a v…
- CVE-2018-6959VMware vRealize Automation (vRA) prior to 7.4.0 contains a v…
- CVE-2018-6960VMware Horizon DaaS (7.x before 8.0.0) contains a broken aut…
- CVE-2018-6961VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 c…8.1
- CVE-2018-6962VMware Fusion (10.x before 10.1.2) contains a signature bypa…
- CVE-2018-6964VMware Horizon Client for Linux (4.x before 4.8.0 and prior)…
- CVE-2018-6965VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (…8.1
- CVE-2018-6966VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (…8.1
- CVE-2018-6967VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (…8.1
- CVE-2018-6968The VMware AirWatch Agent for Android prior to 8.2 and AirWa…
- CVE-2018-6969VMware Tools (10.x and prior before 10.3.0) contains an out-…
Are you affected by CVE-2018-6963?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST