CVE-2016-5329: Infoleak
Published Dec 29, 2016
·Updated
VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
Affected Software
6 affected components
vmware Fusion=8.0.0
vmware Fusion=8.0.1
vmware Fusion=8.0.2
vmware Fusion=8.1.0
vmware Fusion=8.1.1
Apple iOS and macOS
Event History
Dec 29, 2016
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5329?
CVE-2016-5329 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-5329?
To fix CVE-2016-5329, update VMware Fusion to version 8.5 or later.
3
What does CVE-2016-5329 allow attackers to do?
CVE-2016-5329 allows local users to determine kernel memory addresses and bypass the kASLR protection.
4
Which versions of VMware Fusion are affected by CVE-2016-5329?
CVE-2016-5329 affects VMware Fusion versions 8.0.0, 8.0.1, 8.0.2, 8.1.0, and 8.1.1.
5
What is necessary for CVE-2016-5329 to be exploitable?
CVE-2016-5329 is exploitable when System Integrity Protection (SIP) is enabled on OS X.