CVE-2017-4905: Medium severity VMware Fusion vulnerability
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-4905?
CVE-2017-4905 is categorized as a high severity vulnerability affecting various VMware products.
How do I fix CVE-2017-4905?
To fix CVE-2017-4905, apply the appropriate patches for your affected VMware ESXi, Workstation or Fusion versions as specified by VMware.
Which versions of VMware products are affected by CVE-2017-4905?
CVE-2017-4905 affects VMware ESXi version 5.5, 6.0, and 6.5, as well as VMware Workstation Pro/Player 12.x and Fusion Pro/Fusion 8.x.
What are the risks of not addressing CVE-2017-4905?
Failure to address CVE-2017-4905 could lead to unauthorized access or control over the affected VMware systems.
Is there a specific patch for CVE-2017-4905 for each affected VMware version?
Yes, each affected VMware version has a designated patch, such as ESXi650-201703410-SG for ESXi 6.5.