CVE-2017-4925: Null Pointer Dereference
First published: Fri Sep 15 2017(Updated: )
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware ESXi and Horizon DaaS | =5.5 | |
| VMware ESXi and Horizon DaaS | =5.5-1 | |
| VMware ESXi and Horizon DaaS | =5.5-2 | |
| VMware ESXi and Horizon DaaS | =5.5-3a | |
| VMware ESXi and Horizon DaaS | =5.5-3b | |
| VMware ESXi and Horizon DaaS | =5.5-550-20170901001s | |
| VMware ESXi and Horizon DaaS | =6.0 | |
| VMware ESXi and Horizon DaaS | =6.0-1 | |
| VMware ESXi and Horizon DaaS | =6.0-1a | |
| VMware ESXi and Horizon DaaS | =6.0-1b | |
| VMware ESXi and Horizon DaaS | =6.0-2 | |
| VMware ESXi and Horizon DaaS | =6.0-3 | |
| VMware ESXi and Horizon DaaS | =6.0-3a | |
| VMware ESXi and Horizon DaaS | =6.0-600-201504401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201505401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507101 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507102 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507402 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507403 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507404 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507405 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507406 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201507407 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509101 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509102 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509201 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509202 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509203 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509204 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509205 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509206 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509207 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509208 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509209 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201509210 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201510401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201511401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601101 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601102 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601402 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601403 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601404 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201601405 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201602401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603101 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603102 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603201 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603202 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603203 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603204 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603205 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603206 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603207 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201603208 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201605401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201608101 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201608401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201608402 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201608403 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201608404 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201608405 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201610410 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201611401 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201611402 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201611403 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702101 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702102 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702201 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702202 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702203 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702204 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702205 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702206 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702207 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702208 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702209 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702210 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702211 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201702212 | |
| VMware ESXi and Horizon DaaS | =6.0-600-201703401 | |
| VMware ESXi and Horizon DaaS | =6.5 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201701001 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201703001 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201703002 | |
| VMware ESXi and Horizon DaaS | =6.5-650-201704001 | |
| VMware Workstation and ESXi | >=12.0.0<12.5.3 | |
| VMware Workstation | >=12.0.0<12.5.3 | |
| VMware Fusion | >=8.0.0<8.5.4 | |
| Apple iOS and macOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-4925?
CVE-2017-4925 has a severity rating of medium due to its potential to cause a denial of service.
How do I fix CVE-2017-4925?
To fix CVE-2017-4925, ensure that you apply the appropriate patches for the affected VMware ESXi, Workstation, or Fusion products.
Which versions of VMware are affected by CVE-2017-4925?
CVE-2017-4925 affects VMware ESXi versions 5.5, 6.0, and 6.5, along with VMware Workstation versions prior to 12.5.3 and Fusion prior to 8.5.4.
What kind of issue does CVE-2017-4925 represent?
CVE-2017-4925 represents a NULL pointer dereference vulnerability.
Who is impacted by CVE-2017-4925?
Organizations utilizing specific versions of VMware ESXi, Workstation, or Fusion without the latest patches are impacted by CVE-2017-4925.
- agent/type
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware esxi and horizon daas
- version/vmware esxi and horizon daas/5.5
- version/vmware esxi and horizon daas/5.5-1
- version/vmware esxi and horizon daas/5.5-2
- version/vmware esxi and horizon daas/5.5-3a
- version/vmware esxi and horizon daas/5.5-3b
- version/vmware esxi and horizon daas/5.5-550-20170901001s
- version/vmware esxi and horizon daas/6.0
- version/vmware esxi and horizon daas/6.0-1
- version/vmware esxi and horizon daas/6.0-1a
- version/vmware esxi and horizon daas/6.0-1b
- version/vmware esxi and horizon daas/6.0-2
- version/vmware esxi and horizon daas/6.0-3
- version/vmware esxi and horizon daas/6.0-3a
- version/vmware esxi and horizon daas/6.0-600-201504401
- version/vmware esxi and horizon daas/6.0-600-201505401
- version/vmware esxi and horizon daas/6.0-600-201507101
- version/vmware esxi and horizon daas/6.0-600-201507102
- version/vmware esxi and horizon daas/6.0-600-201507401
- version/vmware esxi and horizon daas/6.0-600-201507402
- version/vmware esxi and horizon daas/6.0-600-201507403
- version/vmware esxi and horizon daas/6.0-600-201507404
- version/vmware esxi and horizon daas/6.0-600-201507405
- version/vmware esxi and horizon daas/6.0-600-201507406
- version/vmware esxi and horizon daas/6.0-600-201507407
- version/vmware esxi and horizon daas/6.0-600-201509101
- version/vmware esxi and horizon daas/6.0-600-201509102
- version/vmware esxi and horizon daas/6.0-600-201509201
- version/vmware esxi and horizon daas/6.0-600-201509202
- version/vmware esxi and horizon daas/6.0-600-201509203
- version/vmware esxi and horizon daas/6.0-600-201509204
- version/vmware esxi and horizon daas/6.0-600-201509205
- version/vmware esxi and horizon daas/6.0-600-201509206
- version/vmware esxi and horizon daas/6.0-600-201509207
- version/vmware esxi and horizon daas/6.0-600-201509208
- version/vmware esxi and horizon daas/6.0-600-201509209
- version/vmware esxi and horizon daas/6.0-600-201509210
- version/vmware esxi and horizon daas/6.0-600-201510401
- version/vmware esxi and horizon daas/6.0-600-201511401
- version/vmware esxi and horizon daas/6.0-600-201601101
- version/vmware esxi and horizon daas/6.0-600-201601102
- version/vmware esxi and horizon daas/6.0-600-201601401
- version/vmware esxi and horizon daas/6.0-600-201601402
- version/vmware esxi and horizon daas/6.0-600-201601403
- version/vmware esxi and horizon daas/6.0-600-201601404
- version/vmware esxi and horizon daas/6.0-600-201601405
- version/vmware esxi and horizon daas/6.0-600-201602401
- version/vmware esxi and horizon daas/6.0-600-201603101
- version/vmware esxi and horizon daas/6.0-600-201603102
- version/vmware esxi and horizon daas/6.0-600-201603201
- version/vmware esxi and horizon daas/6.0-600-201603202
- version/vmware esxi and horizon daas/6.0-600-201603203
- version/vmware esxi and horizon daas/6.0-600-201603204
- version/vmware esxi and horizon daas/6.0-600-201603205
- version/vmware esxi and horizon daas/6.0-600-201603206
- version/vmware esxi and horizon daas/6.0-600-201603207
- version/vmware esxi and horizon daas/6.0-600-201603208
- version/vmware esxi and horizon daas/6.0-600-201605401
- version/vmware esxi and horizon daas/6.0-600-201608101
- version/vmware esxi and horizon daas/6.0-600-201608401
- version/vmware esxi and horizon daas/6.0-600-201608402
- version/vmware esxi and horizon daas/6.0-600-201608403
- version/vmware esxi and horizon daas/6.0-600-201608404
- version/vmware esxi and horizon daas/6.0-600-201608405
- version/vmware esxi and horizon daas/6.0-600-201610410
- version/vmware esxi and horizon daas/6.0-600-201611401
- version/vmware esxi and horizon daas/6.0-600-201611402
- version/vmware esxi and horizon daas/6.0-600-201611403
- version/vmware esxi and horizon daas/6.0-600-201702101
- version/vmware esxi and horizon daas/6.0-600-201702102
- version/vmware esxi and horizon daas/6.0-600-201702201
- version/vmware esxi and horizon daas/6.0-600-201702202
- version/vmware esxi and horizon daas/6.0-600-201702203
- version/vmware esxi and horizon daas/6.0-600-201702204
- version/vmware esxi and horizon daas/6.0-600-201702205
- version/vmware esxi and horizon daas/6.0-600-201702206
- version/vmware esxi and horizon daas/6.0-600-201702207
- version/vmware esxi and horizon daas/6.0-600-201702208
- version/vmware esxi and horizon daas/6.0-600-201702209
- version/vmware esxi and horizon daas/6.0-600-201702210
- version/vmware esxi and horizon daas/6.0-600-201702211
- version/vmware esxi and horizon daas/6.0-600-201702212
- version/vmware esxi and horizon daas/6.0-600-201703401
- version/vmware esxi and horizon daas/6.5
- version/vmware esxi and horizon daas/6.5-650-201701001
- version/vmware esxi and horizon daas/6.5-650-201703001
- version/vmware esxi and horizon daas/6.5-650-201703002
- version/vmware esxi and horizon daas/6.5-650-201704001
- canonical/vmware workstation and esxi
- version/vmware workstation and esxi/12.0.0
- canonical/vmware workstation
- version/vmware workstation/12.0.0
- canonical/vmware fusion
- version/vmware fusion/8.0.0
- vendor/apple
- canonical/apple ios and macos