VMware Products Multiple Vulnerabilities

Last Update Date: 18 Sep 2019 10:37 Release Date: 18 Sep 2019 5368 Views

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

Multiple vulnerabilities were identified in VMware products, a remote attacker could exploit some of these vulnerabilities to trigger remote code execution and sensitive information disclosure on the targeted system.

Impact

Remote Code Execution
Information Disclosure

System / Technologies affected

VMware vSphere ESXi (ESXi) 6.0, 6.5, 6.7
VMware vCenter Server (vCenter) 6.0, 6.5, 6.7

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Apply fixes issued by the vendor:

For detail, please refer to the link below:
https://www.vmware.com/security/advisories/VMSA-2019-0013.html

Vulnerability Identifier

CVE-2017-16544
CVE-2019-5531
CVE-2019-5532
CVE-2019-5534

Source

US-CERT
VMware