CVE-2019-5520
Published: Apr 15, 2019
Modified: Aug 4, 2024
Description
VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
| Vendor | Product | Versions |
|---|---|---|
VMware | ESXi | affected 6.7 before ESXi670-201904101-SGaffected 6.5 before ESXi650-201903001 |
VMware | Workstation | affected 15.x before 15.0.3affected 14.x before 14.1.6 |
VMware | Fusion | affected 11.x before 11.0.3affected 10.x before 10.1.6 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now