← Back

CVE-2020-4004

nvd nist
Published: Nov 20, 2020Modified: Oct 31, 2025

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: NVD

Description

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7) contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Affected (183)

Vmware
4 products
Fusion
Cloud Foundation
Workstation
Esxi
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fusion
From 11.0 to 11.5.7
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
From 3.0 to 3.10.1.2
Cloud Foundation
From 4.0 to 4.1.0.1
Workstation
From 15.0.0 to 15.5.7
Configuration C
65 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.5
Esxi
Version 6.5 650-201701001
Esxi
Version 6.5 650-201703001
Esxi
Version 6.5 650-201703002
Esxi
Version 6.5 650-201704001
Esxi
Version 6.5 650-201707101
Esxi
Version 6.5 650-201707102
Esxi
Version 6.5 650-201707103
Esxi
Version 6.5 650-201707201
Esxi
Version 6.5 650-201707202
Esxi
Version 6.5 650-201707203
Esxi
Version 6.5 650-201707204
Esxi
Version 6.5 650-201707205
Esxi
Version 6.5 650-201707206
Esxi
Version 6.5 650-201707207
Esxi
Version 6.5 650-201707208
Esxi
Version 6.5 650-201707209
Esxi
Version 6.5 650-201707210
Esxi
Version 6.5 650-201707211
Esxi
Version 6.5 650-201707212
Esxi
Version 6.5 650-201707213
Esxi
Version 6.5 650-201707214
Esxi
Version 6.5 650-201707215
Esxi
Version 6.5 650-201707216
Esxi
Version 6.5 650-201707217
Esxi
Version 6.5 650-201707218
Esxi
Version 6.5 650-201707219
Esxi
Version 6.5 650-201707220
Esxi
Version 6.5 650-201707221
Esxi
Version 6.5 650-201710001
Esxi
Version 6.5 650-201712001
Esxi
Version 6.5 650-201803001
Esxi
Version 6.5 650-201806001
Esxi
Version 6.5 650-201808001
Esxi
Version 6.5 650-201810001
Esxi
Version 6.5 650-201810002
Esxi
Version 6.5 650-201811001
Esxi
Version 6.5 650-201811002
Esxi
Version 6.5 650-201811301
Esxi
Version 6.5 650-201901001
Esxi
Version 6.5 650-201903001
Esxi
Version 6.5 650-201905001
Esxi
Version 6.5 650-201908001
Esxi
Version 6.5 650-201910001
Esxi
Version 6.5 650-20191004001
Esxi
Version 6.5 650-201911001
Esxi
Version 6.5 650-201911401
Esxi
Version 6.5 650-201911402
Esxi
Version 6.5 650-201912001
Esxi
Version 6.5 650-201912002
Esxi
Version 6.5 650-201912101
Esxi
Version 6.5 650-201912102
Esxi
Version 6.5 650-201912103
Esxi
Version 6.5 650-201912104
Esxi
Version 6.5 650-201912301
Esxi
Version 6.5 650-201912401
Esxi
Version 6.5 650-201912402
Esxi
Version 6.5 650-201912403
Esxi
Version 6.5 650-201912404
Esxi
Version 6.5 650-202005001
Esxi
Version 6.5 650-202006001
Esxi
Version 6.5 650-202007001
Esxi
Version 6.5 650-202010001
Esxi
Version 6.5 650-202011001
Esxi
Version 6.5 650-202011002
Configuration D
109 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.7
Esxi
Version 6.7 670-201806001
Esxi
Version 6.7 670-201807001
Esxi
Version 6.7 670-201808001
Esxi
Version 6.7 670-201810001
Esxi
Version 6.7 670-201810101
Esxi
Version 6.7 670-201810102
Esxi
Version 6.7 670-201810103
Esxi
Version 6.7 670-201810201
Esxi
Version 6.7 670-201810202
Esxi
Version 6.7 670-201810203
Esxi
Version 6.7 670-201810204
Esxi
Version 6.7 670-201810205
Esxi
Version 6.7 670-201810206
Esxi
Version 6.7 670-201810207
Esxi
Version 6.7 670-201810208
Esxi
Version 6.7 670-201810209
Esxi
Version 6.7 670-201810210
Esxi
Version 6.7 670-201810211
Esxi
Version 6.7 670-201810212
Esxi
Version 6.7 670-201810213
Esxi
Version 6.7 670-201810214
Esxi
Version 6.7 670-201810215
Esxi
Version 6.7 670-201810216
Esxi
Version 6.7 670-201810217
Esxi
Version 6.7 670-201810218
Esxi
Version 6.7 670-201810219
Esxi
Version 6.7 670-201810220
Esxi
Version 6.7 670-201810221
Esxi
Version 6.7 670-201810222
Esxi
Version 6.7 670-201810223
Esxi
Version 6.7 670-201810224
Esxi
Version 6.7 670-201810225
Esxi
Version 6.7 670-201810226
Esxi
Version 6.7 670-201810227
Esxi
Version 6.7 670-201810228
Esxi
Version 6.7 670-201810229
Esxi
Version 6.7 670-201810230
Esxi
Version 6.7 670-201810231
Esxi
Version 6.7 670-201810232
Esxi
Version 6.7 670-201810233
Esxi
Version 6.7 670-201810234
Esxi
Version 6.7 670-201811001
Esxi
Version 6.7 670-201901001
Esxi
Version 6.7 670-201901401
Esxi
Version 6.7 670-201901402
Esxi
Version 6.7 670-201901403
Esxi
Version 6.7 670-201903001
Esxi
Version 6.7 670-201904001
Esxi
Version 6.7 670-201904201-ug
Esxi
Version 6.7 670-201904201
Esxi
Version 6.7 670-201904202-ug
Esxi
Version 6.7 670-201904202
Esxi
Version 6.7 670-201904203-ug
Esxi
Version 6.7 670-201904203
Esxi
Version 6.7 670-201904204-ug
Esxi
Version 6.7 670-201904204
Esxi
Version 6.7 670-201904205-ug
Esxi
Version 6.7 670-201904205
Esxi
Version 6.7 670-201904206-ug
Esxi
Version 6.7 670-201904206
Esxi
Version 6.7 670-201904207-ug
Esxi
Version 6.7 670-201904207
Esxi
Version 6.7 670-201904208-ug
Esxi
Version 6.7 670-201904208
Esxi
Version 6.7 670-201904209-ug
Esxi
Version 6.7 670-201904209
Esxi
Version 6.7 670-201904210-ug
Esxi
Version 6.7 670-201904210
Esxi
Version 6.7 670-201904211-ug
Esxi
Version 6.7 670-201904211
Esxi
Version 6.7 670-201904212-ug
Esxi
Version 6.7 670-201904212
Esxi
Version 6.7 670-201904213-ug
Esxi
Version 6.7 670-201904213
Esxi
Version 6.7 670-201904214-ug
Esxi
Version 6.7 670-201904214
Esxi
Version 6.7 670-201904215-ug
Esxi
Version 6.7 670-201904215
Esxi
Version 6.7 670-201904216-ug
Esxi
Version 6.7 670-201904216
Esxi
Version 6.7 670-201904217-ug
Esxi
Version 6.7 670-201904217
Esxi
Version 6.7 670-201904218-ug
Esxi
Version 6.7 670-201904218
Esxi
Version 6.7 670-201904219-ug
Esxi
Version 6.7 670-201904219
Esxi
Version 6.7 670-201904220-ug
Esxi
Version 6.7 670-201904220
Esxi
Version 6.7 670-201904221-ug
Esxi
Version 6.7 670-201904221
Esxi
Version 6.7 670-201904222-ug
Esxi
Version 6.7 670-201904222
Esxi
Version 6.7 670-201904223-ug
Esxi
Version 6.7 670-201904223
Esxi
Version 6.7 670-201904224-ug
Esxi
Version 6.7 670-201904224
Esxi
Version 6.7 670-201904225-ug
Esxi
Version 6.7 670-201904225
Esxi
Version 6.7 670-201904226
Esxi
Version 6.7 670-201905001
Esxi
Version 6.7 670-201906002
Esxi
Version 6.7 670-201911001
Esxi
Version 6.7 670-201912001
Esxi
Version 6.7 670-202004001
Esxi
Version 6.7 670-202004002
Esxi
Version 6.7 670-202006001
Esxi
Version 6.7 670-202008001
Esxi
Version 6.7 670-202010001
Configuration E
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 7.0
Esxi
Version 7.0 beta
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.