CVE-2018-6957
First published: Thu Mar 15 2018(Updated: )
VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation Pro | >=14.0<14.1.1 | |
| VMware Workstation Pro | =12.0 | |
| VMware Workstation Pro | =12.1 | |
| VMware Workstation Pro | =12.01 | |
| VMware Workstation Pro | =12.1.1 | |
| VMware Workstation Pro | =12.5 | |
| VMware Workstation Pro | =12.5.1 | |
| VMware Workstation Pro | =12.5.2 | |
| VMware Workstation Pro | =12.5.3 | |
| VMware Workstation Pro | =12.5.4 | |
| VMware Workstation Pro | =12.5.5 | |
| VMware Workstation Pro | =12.5.6 | |
| VMware Workstation Pro | =12.5.7 | |
| VMware Workstation Player | >=14.0<14.1.1 | |
| VMware Workstation Player | =12.0 | |
| VMware Workstation Player | =12.0.1 | |
| VMware Workstation Player | =12.1 | |
| VMware Workstation Player | =12.1.1 | |
| VMware Workstation Player | =12.5 | |
| VMware Workstation Player | =12.5.1 | |
| VMware Workstation Player | =12.5.2 | |
| VMware Workstation Player | =12.5.3 | |
| VMware Workstation Player | =12.5.4 | |
| VMware Workstation Player | =12.5.5 | |
| VMware Workstation Player | =12.5.6 | |
| VMware Workstation Player | =12.5.7 | |
| VMware Fusion | =8.0 | |
| VMware Fusion | =8.0.1 | |
| VMware Fusion | =8.0.2 | |
| VMware Fusion | =8.1 | |
| VMware Fusion | =8.1.1 | |
| VMware Fusion | =8.5 | |
| VMware Fusion | =8.5.1 | |
| VMware Fusion | =8.5.2 | |
| VMware Fusion | =8.5.3 | |
| VMware Fusion | =8.5.4 | |
| VMware Fusion | =8.5.5 | |
| VMware Fusion | =8.5.6 | |
| VMware Fusion | =8.5.7 | |
| VMware Fusion | =8.5.8 | |
| VMware Fusion | >=10.0<10.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-6957?
CVE-2018-6957 is a denia...
What software is affected by CVE-2018-6957?
VMware Workstation Pro (14.x before 14.1.1, 12.x) and VMware Fusion (10.x before 10.1.1 and 8.x) are affected.
How can CVE-2018-6957 be exploited?
CVE-2018-6957 can be exploited by opening a large number of VNC sessions, provided that VNC is manually enabled on VMware Workstation and Fusion.
What is the severity of CVE-2018-6957?
CVE-2018-6957 has a severity rating of medium (5.3).
Where can I find more information about CVE-2018-6957?
You can find more information about CVE-2018-6957 at the following references: [1](http://www.securityfocus.com/bid/103431), [2](http://www.securitytracker.com/id/1040539), [3](https://www.vmware.com/security/advisories/VMSA-2018-0008.html)
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/vmware
- canonical/vmware workstation pro
- version/vmware workstation pro/14.0
- version/vmware workstation pro/12.0
- version/vmware workstation pro/12.1
- version/vmware workstation pro/12.01
- version/vmware workstation pro/12.1.1
- version/vmware workstation pro/12.5
- version/vmware workstation pro/12.5.1
- version/vmware workstation pro/12.5.2
- version/vmware workstation pro/12.5.3
- version/vmware workstation pro/12.5.4
- version/vmware workstation pro/12.5.5
- version/vmware workstation pro/12.5.6
- version/vmware workstation pro/12.5.7
- canonical/vmware workstation player
- version/vmware workstation player/14.0
- version/vmware workstation player/12.0
- version/vmware workstation player/12.0.1
- version/vmware workstation player/12.1
- version/vmware workstation player/12.1.1
- version/vmware workstation player/12.5
- version/vmware workstation player/12.5.1
- version/vmware workstation player/12.5.2
- version/vmware workstation player/12.5.3
- version/vmware workstation player/12.5.4
- version/vmware workstation player/12.5.5
- version/vmware workstation player/12.5.6
- version/vmware workstation player/12.5.7
- canonical/vmware fusion
- version/vmware fusion/8.0
- version/vmware fusion/8.0.1
- version/vmware fusion/8.0.2
- version/vmware fusion/8.1
- version/vmware fusion/8.1.1
- version/vmware fusion/8.5
- version/vmware fusion/8.5.1
- version/vmware fusion/8.5.2
- version/vmware fusion/8.5.3
- version/vmware fusion/8.5.4
- version/vmware fusion/8.5.5
- version/vmware fusion/8.5.6
- version/vmware fusion/8.5.7
- version/vmware fusion/8.5.8
- version/vmware fusion/10.0