← Back

CVE-2019-5518

nvd nist
Published: Apr 1, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.

Affected (75)

Vmware
3 products
Esxi
Fusion
Workstation
Configuration A
75 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.0
Esxi
Version 6.0 600-201811001
Esxi
Version 6.0 600-201811401
Esxi
Version 6.5
Esxi
Version 6.5 650-201707101
Esxi
Version 6.5 650-201707102
Esxi
Version 6.5 650-201707103
Esxi
Version 6.5 650-201707201
Esxi
Version 6.5 650-201707202
Esxi
Version 6.5 650-201707203
Esxi
Version 6.5 650-201707204
Esxi
Version 6.5 650-201707205
Esxi
Version 6.5 650-201707206
Esxi
Version 6.5 650-201707207
Esxi
Version 6.5 650-201707208
Esxi
Version 6.5 650-201707209
Esxi
Version 6.5 650-201707210
Esxi
Version 6.5 650-201707211
Esxi
Version 6.5 650-201707212
Esxi
Version 6.5 650-201707213
Esxi
Version 6.5 650-201707214
Esxi
Version 6.5 650-201707215
Esxi
Version 6.5 650-201707216
Esxi
Version 6.5 650-201707217
Esxi
Version 6.5 650-201707218
Esxi
Version 6.5 650-201707219
Esxi
Version 6.5 650-201707220
Esxi
Version 6.5 650-201707221
Esxi
Version 6.5 650-201811001
Esxi
Version 6.5 650-201811301
Esxi
Version 6.7
Esxi
Version 6.7 670-201810101
Esxi
Version 6.7 670-201810102
Esxi
Version 6.7 670-201810103
Esxi
Version 6.7 670-201810201
Esxi
Version 6.7 670-201810202
Esxi
Version 6.7 670-201810203
Esxi
Version 6.7 670-201810204
Esxi
Version 6.7 670-201810205
Esxi
Version 6.7 670-201810206
Esxi
Version 6.7 670-201810207
Esxi
Version 6.7 670-201810208
Esxi
Version 6.7 670-201810209
Esxi
Version 6.7 670-201810210
Esxi
Version 6.7 670-201810211
Esxi
Version 6.7 670-201810212
Esxi
Version 6.7 670-201810213
Esxi
Version 6.7 670-201810214
Esxi
Version 6.7 670-201810215
Esxi
Version 6.7 670-201810216
Esxi
Version 6.7 670-201810217
Esxi
Version 6.7 670-201810218
Esxi
Version 6.7 670-201810219
Esxi
Version 6.7 670-201810220
Esxi
Version 6.7 670-201810221
Esxi
Version 6.7 670-201810222
Esxi
Version 6.7 670-201810223
Esxi
Version 6.7 670-201810224
Esxi
Version 6.7 670-201810225
Esxi
Version 6.7 670-201810226
Esxi
Version 6.7 670-201810227
Esxi
Version 6.7 670-201810228
Esxi
Version 6.7 670-201810229
Esxi
Version 6.7 670-201810230
Esxi
Version 6.7 670-201810231
Esxi
Version 6.7 670-201810232
Esxi
Version 6.7 670-201810233
Esxi
Version 6.7 670-201810234
Esxi
Version 6.7 670-201901401
Esxi
Version 6.7 670-201901402
Esxi
Version 6.7 670-201901403
Vmware
Fusion
From 10.0.0 to 10.1.6
Fusion
From 11.0.0 to 11.0.3
Vmware
Workstation
From 14.0.0 to 14.1.7
Workstation
From 15.0.0 to 15.0.4

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: security@vmware.com
Third Party AdvisoryVDB Entry
Source: security@vmware.com
Source: security@vmware.com
Vendor Advisory
Source: security@vmware.com
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.