CVE-2022-31693

Published: Jun 7, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest OS.

Affected (1)

Products: Vmware: Tools

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Tools	From 10.0.0 to 12.1.5

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (6)

https://security.netapp.com/advisory/ntap-20221223-0009/

Source: security@vmware.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20230824-0009/

Source: security@vmware.com

https://www.vmware.com/security/advisories/VMSA-2022-0029.html

Source: security@vmware.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20221223-0009/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20230824-0009/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.vmware.com/security/advisories/VMSA-2022-0029.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.