CVE-2018-6969: High severity vmware tools vulnerability
VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable file sharing/shared folders (HGFS) unless required, since file sharing must be enabled for exploitation and the vulnerability is in HGFS.
VMware HGFS (File Sharing / Shared Folders) file sharing enabled = disable
Event History
Frequently Asked Questions
What is CVE-2018-6969?
CVE-2018-6969 is a vulnerability in VMware Tools (10.x and prior before 10.3.0) that allows attackers to escalate their privileges on the guest VMs or disclose sensitive information.
How severe is CVE-2018-6969?
CVE-2018-6969 has a severity rating of 7 (high).
What is the affected software version of CVE-2018-6969?
The affected software version of CVE-2018-6969 is VMware Tools 10.x and prior before 10.3.0.
How can CVE-2018-6969 be exploited?
CVE-2018-6969 can be exploited by successfully exploiting an out-of-bounds read vulnerability in the HGFS component of VMware Tools, which may allow attackers to escalate privileges or disclose sensitive information.
How do I fix CVE-2018-6969?
To fix CVE-2018-6969, update VMware Tools to version 10.3.0 or later, as this version contains the necessary patches to address the vulnerability.