CVE-2018-6983: Integer Overflow
Published Nov 27, 2018
·Updated
VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host.
Affected Software
5 affected components
VMware Workstation>=14.0.0<14.1.5
VMware Workstation>=15.0.0<15.0.2
vmware Fusion>=10.0.0<10.1.5
vmware Fusion>=11.0.0<11.0.2
Apple iOS and macOS
Event History
Nov 27, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-6983?
CVE-2018-6983 is an integer overflow vulnerability in VMware Workstation and Fusion, allowing a guest to execute code on the host.
2
Is VMware Workstation affected by CVE-2018-6983?
Yes, VMware Workstation versions before 15.0.2 and 14.1.5 are affected.
3
Is VMware Fusion affected by CVE-2018-6983?
Yes, VMware Fusion versions before 11.0.2 and 10.1.5 are affected.
4
What is the severity of CVE-2018-6983?
CVE-2018-6983 has a severity rating of 8.8 (high).
5
How can I fix CVE-2018-6983?
To fix CVE-2018-6983, update VMware Workstation to version 15.0.2 or 14.1.5, and update VMware Fusion to version 11.0.2 or 10.1.5.