CVE-2017-4938

Published: Nov 17, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: NVD

Description

VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Affected (26)

Products: Vmware: Workstation, Fusion

Vmware

2 products

Workstation

Fusion

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Vmware Workstation	Version 12.0.0
Vmware Workstation	Version 12.0.1
Vmware Workstation	Version 12.1.1
Vmware Workstation	Version 12.1
Vmware Workstation	Version 12.5.1
Vmware Workstation	Version 12.5.2
Vmware Workstation	Version 12.5.3
Vmware Workstation	Version 12.5.4
Vmware Workstation	Version 12.5.5
Vmware Workstation	Version 12.5.6
Vmware Workstation	Version 12.5.7
Vmware Workstation	Version 12.5

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Vmware Fusion	Version 8.0.0
Vmware Fusion	Version 8.0.1
Vmware Fusion	Version 8.0.2
Vmware Fusion	Version 8.1.0
Vmware Fusion	Version 8.1.1
Vmware Fusion	Version 8.5.0
Vmware Fusion	Version 8.5.1
Vmware Fusion	Version 8.5.2
Vmware Fusion	Version 8.5.3
Vmware Fusion	Version 8.5.4
Vmware Fusion	Version 8.5.5
Vmware Fusion	Version 8.5.6
Vmware Fusion	Version 8.5.7
Vmware Fusion	Version 8.5.8