CVE-2018-6982: Medium severity vmware workstation and esxi vulnerability
Published Dec 4, 2018
·Updated
VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.
Affected Software
170 affected components
VMware Workstation>=14.0.0<14.1.4
VMware Workstation=15.0.0
vmware Fusion>=10.0.0<10.1.4
vmware Fusion=11.0.0
Apple iOS and macOS
VMware ESXi=6.0
VMware ESXi=6.0-1
VMware ESXi=6.0-1a
VMware ESXi=6.0-1b
VMware ESXi=6.0-2
VMware ESXi=6.0-3
VMware ESXi=6.0-3a
VMware ESXi=6.0-600-201504401
VMware ESXi=6.0-600-201505401
VMware ESXi=6.0-600-201507101
VMware ESXi=6.0-600-201507102
VMware ESXi=6.0-600-201507401
VMware ESXi=6.0-600-201507402
VMware ESXi=6.0-600-201507403
VMware ESXi=6.0-600-201507404
VMware ESXi=6.0-600-201507405
VMware ESXi=6.0-600-201507406
VMware ESXi=6.0-600-201507407
VMware ESXi=6.0-600-201509101
VMware ESXi=6.0-600-201509102
VMware ESXi=6.0-600-201509201
VMware ESXi=6.0-600-201509202
VMware ESXi=6.0-600-201509203
VMware ESXi=6.0-600-201509204
VMware ESXi=6.0-600-201509205
VMware ESXi=6.0-600-201509206
VMware ESXi=6.0-600-201509207
VMware ESXi=6.0-600-201509208
VMware ESXi=6.0-600-201509209
VMware ESXi=6.0-600-201509210
VMware ESXi=6.0-600-201510401
VMware ESXi=6.0-600-201511401
VMware ESXi=6.0-600-201601101
VMware ESXi=6.0-600-201601102
VMware ESXi=6.0-600-201601401
VMware ESXi=6.0-600-201601402
VMware ESXi=6.0-600-201601403
VMware ESXi=6.0-600-201601404
VMware ESXi=6.0-600-201601405
VMware ESXi=6.0-600-201602401
VMware ESXi=6.0-600-201603101
VMware ESXi=6.0-600-201603102
VMware ESXi=6.0-600-201603201
VMware ESXi=6.0-600-201603202
VMware ESXi=6.0-600-201603203
VMware ESXi=6.0-600-201603204
VMware ESXi=6.0-600-201603205
VMware ESXi=6.0-600-201603206
VMware ESXi=6.0-600-201603207
VMware ESXi=6.0-600-201603208
VMware ESXi=6.0-600-201605401
VMware ESXi=6.0-600-201608101
VMware ESXi=6.0-600-201608401
VMware ESXi=6.0-600-201608402
VMware ESXi=6.0-600-201608403
VMware ESXi=6.0-600-201608404
VMware ESXi=6.0-600-201608405
VMware ESXi=6.0-600-201610410
VMware ESXi=6.0-600-201611401
VMware ESXi=6.0-600-201611402
VMware ESXi=6.0-600-201611403
VMware ESXi=6.0-600-201702101
VMware ESXi=6.0-600-201702102
VMware ESXi=6.0-600-201702201
VMware ESXi=6.0-600-201702202
VMware ESXi=6.0-600-201702203
VMware ESXi=6.0-600-201702204
VMware ESXi=6.0-600-201702205
VMware ESXi=6.0-600-201702206
VMware ESXi=6.0-600-201702207
VMware ESXi=6.0-600-201702208
VMware ESXi=6.0-600-201702209
VMware ESXi=6.0-600-201702210
VMware ESXi=6.0-600-201702211
VMware ESXi=6.0-600-201702212
VMware ESXi=6.0-600-201703401
VMware ESXi=6.0-600-201706101
VMware ESXi=6.0-600-201706102
VMware ESXi=6.0-600-201706103
VMware ESXi=6.0-600-201706401
VMware ESXi=6.0-600-201706402
VMware ESXi=6.0-600-201706403
VMware ESXi=6.0-600-201710301
VMware ESXi=6.0-600-201811001
VMware ESXi=6.5
VMware ESXi=6.5-650-201701001
VMware ESXi=6.5-650-201703001
VMware ESXi=6.5-650-201703002
VMware ESXi=6.5-650-201704001
VMware ESXi=6.5-650-201707101
VMware ESXi=6.5-650-201707102
VMware ESXi=6.5-650-201707103
VMware ESXi=6.5-650-201707201
VMware ESXi=6.5-650-201707202
VMware ESXi=6.5-650-201707203
VMware ESXi=6.5-650-201707204
VMware ESXi=6.5-650-201707205
VMware ESXi=6.5-650-201707206
VMware ESXi=6.5-650-201707207
VMware ESXi=6.5-650-201707208
VMware ESXi=6.5-650-201707209
VMware ESXi=6.5-650-201707210
VMware ESXi=6.5-650-201707211
VMware ESXi=6.5-650-201707212
VMware ESXi=6.5-650-201707213
VMware ESXi=6.5-650-201707214
VMware ESXi=6.5-650-201707215
VMware ESXi=6.5-650-201707216
VMware ESXi=6.5-650-201707217
VMware ESXi=6.5-650-201707218
VMware ESXi=6.5-650-201707219
VMware ESXi=6.5-650-201707220
VMware ESXi=6.5-650-201707221
VMware ESXi=6.5-650-201710001
VMware ESXi=6.5-650-201712001
VMware ESXi=6.5-650-201803001
VMware ESXi=6.5-650-201806001
VMware ESXi=6.5-650-201808001
VMware ESXi=6.5-650-201810001
VMware ESXi=6.5-650-201810002
VMware ESXi=6.5-650-201811001
VMware ESXi=6.5-650-201811002
VMware ESXi=6.7
VMware ESXi=6.7-670-201806001
VMware ESXi=6.7-670-201807001
VMware ESXi=6.7-670-201808001
VMware ESXi=6.7-670-201810001
VMware ESXi=6.7-670-201810101
VMware ESXi=6.7-670-201810102
VMware ESXi=6.7-670-201810103
VMware ESXi=6.7-670-201810201
VMware ESXi=6.7-670-201810202
VMware ESXi=6.7-670-201810203
VMware ESXi=6.7-670-201810204
VMware ESXi=6.7-670-201810205
VMware ESXi=6.7-670-201810206
VMware ESXi=6.7-670-201810207
VMware ESXi=6.7-670-201810208
VMware ESXi=6.7-670-201810209
VMware ESXi=6.7-670-201810210
VMware ESXi=6.7-670-201810211
VMware ESXi=6.7-670-201810212
VMware ESXi=6.7-670-201810213
VMware ESXi=6.7-670-201810214
VMware ESXi=6.7-670-201810215
VMware ESXi=6.7-670-201810216
VMware ESXi=6.7-670-201810217
VMware ESXi=6.7-670-201810218
VMware ESXi=6.7-670-201810219
VMware ESXi=6.7-670-201810220
VMware ESXi=6.7-670-201810221
VMware ESXi=6.7-670-201810222
VMware ESXi=6.7-670-201810223
VMware ESXi=6.7-670-201810224
VMware ESXi=6.7-670-201810225
VMware ESXi=6.7-670-201810226
VMware ESXi=6.7-670-201810227
VMware ESXi=6.7-670-201810228
VMware ESXi=6.7-670-201810229
VMware ESXi=6.7-670-201810230
VMware ESXi=6.7-670-201810231
VMware ESXi=6.7-670-201810232
VMware ESXi=6.7-670-201810233
VMware ESXi=6.7-670-201810234
VMware ESXi=6.7-670-201811001
Event History
Dec 4, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-6982?
CVE-2018-6982 is rated as a medium severity vulnerability.
2
How do I fix CVE-2018-6982?
To fix CVE-2018-6982, apply the corresponding patches or updates provided by VMware.
3
Which versions of VMware are affected by CVE-2018-6982?
CVE-2018-6982 affects VMware ESXi 6.5 and 6.7, and specific updates such as ESXi670-201811401-BG and ESXi650-201811301-BG.
4
What type of vulnerability is CVE-2018-6982?
CVE-2018-6982 is an information disclosure vulnerability due to uninitialized stack memory usage in the vmxnet3 virtual network adapter.
5
Is there a workaround for CVE-2018-6982?
There are no known workarounds for CVE-2018-6982; updating the software is the recommended approach.