CVE-2015-2341: Input Validation

Published Jun 13, 2015

Updated

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command.

Affected Software

21 affected components

VMware Fusion=6.0

VMware Fusion=6.0.1

VMware Fusion=6.0.2

VMware Fusion=6.0.3

VMware Fusion=6.0.4

VMware Fusion=6.0.5

VMware Fusion=7.0

VMware Fusion=7.0.1

VMware Fusion=7.1.0

VMware Fusion=7.1.1

VMware Player=6.0

VMware Player=6.0.1

VMware Player=6.0.2

VMware Player=6.0.3

VMware Player=6.0.4

VMware Player=6.0.5

VMware Workstation=10.0

VMware Workstation=10.0.1

VMware Workstation=10.0.2

VMware Workstation=10.0.3

VMware Workstation=10.0.4

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2015-0004.html

Event History

Jun 13, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2341?

CVE-2015-2341 is classified as a denial of service vulnerability affecting specific versions of VMware products.

How do I fix CVE-2015-2341?

To fix CVE-2015-2341, update your VMware Workstation, Player, or Fusion to the latest patched versions.

Which versions are affected by CVE-2015-2341?

CVE-2015-2341 affects VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion versions prior to 6.0.6 and 7.x before 7.0.1.

What impact does CVE-2015-2341 have on systems?

CVE-2015-2341 can allow attackers to cause a denial of service on a 32-bit guest OS or a 64-bit host OS.

Is there a workaround for CVE-2015-2341?

Currently, applying the latest updates is the recommended action as a workaround for CVE-2015-2341.