CVE-2015-1044: Low severity vmware workstation and esxi vulnerability

Published Jan 29, 2015

Updated

vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors.

Affected Software

16 affected components

VMware Workstation=10.0

VMware Workstation=10.0.1

VMware Workstation=10.0.2

VMware Workstation=10.0.3

VMware Workstation=10.0.4

VMware ESXi=5.0

VMware ESXi=5.0-1

VMware ESXi=5.0-2

VMware ESXi=5.1

VMware ESXi=5.1-1

VMware ESXi=5.5

VMware Player=6.0

VMware Player=6.0.1

VMware Player=6.0.2

VMware Player=6.0.3

VMware Player=6.0.4

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2015-0001.html

Event History

Jan 29, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1044?

CVE-2015-1044 has been rated as a medium severity vulnerability due to its ability to cause denial of service on the host OS.

How do I fix CVE-2015-1044?

To fix CVE-2015-1044, upgrade to VMware Workstation 10.0.5 or later, VMware Player 6.0.5 or later, or VMware ESXi 5.5 update 3.

What versions are affected by CVE-2015-1044?

CVE-2015-1044 affects VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi versions 5.0 through 5.5.

What type of attack does CVE-2015-1044 enable?

CVE-2015-1044 allows attackers to execute denial of service attacks against the host operating system.

Is CVE-2015-1044 related to specific VMware products?

Yes, CVE-2015-1044 specifically impacts VMware Workstation, VMware Player, and VMware ESXi software.