← Back

CVE-2018-6974

nvd nist
Published: Oct 16, 2018Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: NVD

Description

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

Affected (125)

3 products
Workstation
Fusion
Esxi
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
From 14.0 to 14.1.3
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From 10.0 to 10.1.3
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Configuration C
123 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Version 6.0
Version 6.0 1
Version 6.0 1a
Version 6.0 1b
Version 6.0 2
Version 6.0 3
Version 6.0 3a
Version 6.0 600-201504401
Version 6.0 600-201505401
Version 6.0 600-201507101
Version 6.0 600-201507102
Version 6.0 600-201507401
Version 6.0 600-201507402
Version 6.0 600-201507403
Version 6.0 600-201507404
Version 6.0 600-201507405
Version 6.0 600-201507406
Version 6.0 600-201507407
Version 6.0 600-201509101
Version 6.0 600-201509102
Version 6.0 600-201509201
Version 6.0 600-201509202
Version 6.0 600-201509203
Version 6.0 600-201509204
Version 6.0 600-201509205
Version 6.0 600-201509206
Version 6.0 600-201509207
Version 6.0 600-201509208
Version 6.0 600-201509209
Version 6.0 600-201509210
Version 6.0 600-201510401
Version 6.0 600-201511401
Version 6.0 600-201601101
Version 6.0 600-201601102
Version 6.0 600-201601401
Version 6.0 600-201601402
Version 6.0 600-201601403
Version 6.0 600-201601404
Version 6.0 600-201601405
Version 6.0 600-201602401
Version 6.0 600-201603101
Version 6.0 600-201603102
Version 6.0 600-201603201
Version 6.0 600-201603202
Version 6.0 600-201603203
Version 6.0 600-201603204
Version 6.0 600-201603205
Version 6.0 600-201603206
Version 6.0 600-201603207
Version 6.0 600-201603208
Version 6.0 600-201605401
Version 6.0 600-201608101
Version 6.0 600-201608401
Version 6.0 600-201608402
Version 6.0 600-201608403
Version 6.0 600-201608404
Version 6.0 600-201608405
Version 6.0 600-201610410
Version 6.0 600-201611401
Version 6.0 600-201611402
Version 6.0 600-201611403
Version 6.0 600-201702101
Version 6.0 600-201702102
Version 6.0 600-201702201
Version 6.0 600-201702202
Version 6.0 600-201702203
Version 6.0 600-201702204
Version 6.0 600-201702205
Version 6.0 600-201702206
Version 6.0 600-201702207
Version 6.0 600-201702208
Version 6.0 600-201702209
Version 6.0 600-201702210
Version 6.0 600-201702211
Version 6.0 600-201702212
Version 6.0 600-201703401
Version 6.0 600-201706101
Version 6.0 600-201706102
Version 6.0 600-201706103
Version 6.0 600-201706401
Version 6.0 600-201706402
Version 6.0 600-201706403
Version 6.0 600-201710301
Version 6.5
Version 6.5 2
Version 6.5 650-201701001
Version 6.5 650-201703001
Version 6.5 650-201703002
Version 6.5 650-201704001
Version 6.5 650-201707101
Version 6.5 650-201707102
Version 6.5 650-201707103
Version 6.5 650-201707201
Version 6.5 650-201707202
Version 6.5 650-201707203
Version 6.5 650-201707204
Version 6.5 650-201707205
Version 6.5 650-201707206
Version 6.5 650-201707207
Version 6.5 650-201707208
Version 6.5 650-201707209
Version 6.5 650-201707210
Version 6.5 650-201707211
Version 6.5 650-201707212
Version 6.5 650-201707213
Version 6.5 650-201707214
Version 6.5 650-201707215
Version 6.5 650-201707216
Version 6.5 650-201707217
Version 6.5 650-201707218
Version 6.5 650-201707219
Version 6.5 650-201707220
Version 6.5 650-201707221
Version 6.5 650-201710001
Version 6.5 650-201712001
Version 6.5 650-201803001
Version 6.5 650-201806001
Version 6.5 650-201808001
Version 6.7
Version 6.7 670-201806001
Version 6.7 670-201807001
Version 6.7 670-201808001
Version 6.7 670-201810001

References (8)

Source: security@vmware.com
Third Party AdvisoryVDB Entry
Source: security@vmware.com
Broken LinkThird Party AdvisoryVDB Entry
Source: security@vmware.com
Broken LinkThird Party AdvisoryVDB Entry
Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.