CVE-2017-4925

Published Sep 15, 2017 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-14042 VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
vmware
Published
Updated
Sep 17, 2024, 3:03 AM
Reserved
Dec 26, 2016, 12:00 AM
Status
Modified
Published
Sep 15, 2017, 1:29 PM
Modified
Jun 17, 2026, 1:19 AM