CVE-2015-6933: Medium severity vmware player vulnerability

Published Jan 9, 2016

Updated

The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service (guest OS kernel memory corruption) via unspecified vectors.

Affected Software

16 affected components

VMware Player=7.0

VMware Player=7.1

VMware Player=7.1.1

VMware Workstation=11.0

VMware Workstation=11.1

VMware Workstation=11.1.1

VMware ESXi=5.0

VMware ESXi=5.0-1

VMware ESXi=5.0-2

VMware ESXi=5.1

VMware ESXi=5.1-1

VMware ESXi=5.5

VMware ESXi=6.0

VMware Fusion=7.0

VMware Fusion=7.1

VMware Fusion=7.1.1

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2016-0001.html

Event History

Jan 9, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6933?

CVE-2015-6933 is rated as critical due to its potential to allow unauthorized privilege escalation and service disruption in guest operating systems.

How do I fix CVE-2015-6933?

To fix CVE-2015-6933, update to VMware Workstation 11.1.2, VMware Player 7.1.2, VMware Fusion 7.1.2, or a later version.

Which VMware products are affected by CVE-2015-6933?

CVE-2015-6933 affects VMware Workstation 11.x prior to 11.1.2, VMware Player 7.x prior to 7.1.2, VMware Fusion 7.x prior to 7.1.2, and certain versions of VMware ESXi.

What are the potential impacts of CVE-2015-6933?

The potential impacts of CVE-2015-6933 include privilege escalation for Windows guest OS users and potential denial of service in the guest OS kernel.

Is there a workaround for CVE-2015-6933?

While the best approach is to update to the latest versions, a potential workaround involves disabling Shared Folders if an immediate upgrade is not possible.