← Back

CVE-2019-5540

nvd nist
Published: Nov 20, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.1 / Impact: 4.0
Source: NVD

Description

VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process.

Affected (2)

Vmware
2 products
Workstation
Fusion
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Workstation
From 15.0.0 to 15.5.1
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fusion
From 11.0.0 to 11.5.1
Running on/withPlatform Versions
Apple
Mac Os X
All versions

Related CWEs

CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.