← Back

CVE-2020-3999

nvd nist
Published: Dec 21, 2020Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.0 / Impact: 4.0
Source: NVD

Description

VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx process leading to a denial of service condition.

Affected (7)

Vmware
3 products
Esxi
Workstation
Fusion
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 7.0
Esxi
Version 7.0 beta
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b
Workstation
From 15.0.0 to 15.5.7
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fusion
From 11.5.0 to 11.5.7
Running on/withPlatform Versions
Apple
Mac Os X
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.