VMWare Products Multiple Vulnerabilities

Last Update Date: 25 Nov 2020 09:43 Release Date: 25 Nov 2020 4787 Views

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

Multiple vulnerabilities were identified in VMware products, a remote attacker could exploit some of these vulnerabilities to trigger remote code execution, elevation of privilege and denial of service.

Impact

Denial of Service
Elevation of Privilege
Remote Code Execution

System / Technologies affected

VMware ESXi version 6.5, 6.7 and 7.0
VMware Fusion version 11.x
VMware Workstation version 15.x
VMware Cloud Foundation (ESXi) version 3.x and 4.x

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://www.vmware.com/security/advisories/VMSA-2020-0026.html

Vulnerability Identifier

CVE-2020-4004
CVE-2020-4005

Source

VMware
AusCERT