CVE-2019-5525: Use After Free
VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5525?
The severity of CVE-2019-5525 is high, with a severity value of 8.8.
How does CVE-2019-5525 affect VMware Workstation?
CVE-2019-5525 affects VMware Workstation versions 15.x before 15.1.0, exposing a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend.
Can a malicious user execute code on the Linux host with this vulnerability?
Yes, a malicious user with normal user privileges on the guest machine may exploit CVE-2019-5525 in conjunction with other issues to execute code on the Linux host where VMware Workstation is installed.
Is Linux Linux kernel affected by CVE-2019-5525?
No, Linux Linux kernel is not affected by CVE-2019-5525.
How can I mitigate the vulnerability in VMware Workstation?
To mitigate the vulnerability, users should update their VMware Workstation to version 15.1.0 or later.