CVE-2016-5328: Infoleak
Published Dec 29, 2016
·Updated
VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
Affected Software
24 affected components
vmware tools<=10.0.8
vmware tools=10.0.0
vmware tools=10.0.5
vmware tools=10.0.6
Apple iOS and macOS
vmware tools=9.0.0
vmware tools=9.0.1
vmware tools=9.0.5
vmware tools=9.0.10
vmware tools=9.0.11
vmware tools=9.0.12
vmware tools=9.0.13
vmware tools=9.0.15
vmware tools=9.0.16
vmware tools=9.0.17
vmware tools=9.4.0
vmware tools=9.4.5
vmware tools=9.4.10
vmware tools=9.4.11
vmware tools=9.4.12
vmware tools=9.4.15
vmware tools=9.10.0
vmware tools=9.10.1
vmware tools=9.10.5
Event History
Dec 29, 2016
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5328?
CVE-2016-5328 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-5328?
To resolve CVE-2016-5328, update VMware Tools to version 10.1.0 or later.
3
What software does CVE-2016-5328 affect?
CVE-2016-5328 affects VMware Tools versions 9.x and 10.x prior to 10.1.0.
4
What does CVE-2016-5328 exploit?
CVE-2016-5328 exploits the presence of local users determining kernel memory addresses and bypassing kASLR protection.
5
Is my system vulnerable to CVE-2016-5328?
If you are using VMware Tools versions 9.x or 10.x below 10.1.0, your system is vulnerable to CVE-2016-5328.