CVE-2018-6973

VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.

Affected

VMware · Workstation · Fusion

CVSS v3.0 NVD

8.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.49% chance of exploitation in the next 30 days, 41st percentile

Published

2018-08-15

Updated

2024-09-17

Proof-of-concept exploits (3)

• BLACKHAT-SSG/Vmware-Exploitation3★ · 2022-02-16
• PwnAwan/Vmware-Exploitation3★ · 2022-02-16
• xairy/vmware-exploitation1491★ · 2024-09-04

Security advisories

• https://www.vmware.com/security/advisories/VMSA-2018-0022.html
• http://www.securityfocus.com/bid/105094
• http://www.securitytracker.com/id/1041491

References

• CVE Record
• NVD entry

Related

• CVE-2017-4901
• CVE-2020-3947
• CVE-2017-3881
• CVE-2022-31705
• CVE-2023-20869