CVE-2017-4905

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

Affected products

Vmware Esxi, Vmware Fusion, Vmware Fusion Pro, Vmware Workstation, Vmware Workstation Player

Vmware Fusion

< 8.5.6

Vmware Fusion Pro

< 8.5.6

Fix

Available

CVSS 3.1

5.5 MEDIUM

EPSS

1.2% (66th percentile)

Weakness

CWE-908

NVD status

Modified

Published

2017-06-07