Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-4905

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG,

Description

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware ESXi

  • 6.5 without patch ESXi650-201703410-SGaffected
  • 6.0 U3 without patch ESXi600-201703401-SGaffected
  • 6.0 U2 without patch ESXi600-201703403-SGaffected
  • 6.0 U1 without patch ESXi600-201703402-SGaffected
  • 5.5 without patch ESXi550-201703401-SGaffected

VMware Workstation Pro / Player

  • 12.x prior to 12.5.5affected

VMware Fusion Pro / Fusion

  • 8.x prior to 8.5.6affected

References