PT-2020-17817
CVE-2020-3960
·
تاريخ النشر
2020-06-09
·
تاريخ التحديث
2021-09-28
الوصف من
CVSS 3.1
8.4
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
VMware ESXi versions 6.7 before ESXi670-202006401-SG
VMware ESXi versions 6.5 before ESXi650-202005401-SG
VMware Workstation versions 15.x before 15.5.5
VMware Fusion versions 11.x before 11.5.5
Description
The issue concerns an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine that has a virtual NVMe controller may be able to read privileged information contained in physical memory.
Recommendations
For VMware ESXi version 6.7, update to ESXi670-202006401-SG or later.
For VMware ESXi version 6.5, update to ESXi650-202005401-SG or later.
For VMware Workstation version 15.x, update to 15.5.5 or later.
For VMware Fusion version 11.x, update to 11.5.5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾