CVE-2019-5527: Use After Free
Published Oct 10, 2019
·Updated
ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.
Affected Software
187 affected components
VMware Horizon Linux<5.2.0
VMware Horizon Macos<5.2.0
VMware Horizon Windows<5.2.0
VMware Remote Console Linux>=10.0.0<10.0.5
VMware Remote Console Windows>=10.0.0<10.0.5
VMware Workstation>=15.0.0<15.5.0
VMware Fusion>=11.0.0<11.5.0
Apple iOS and macOS
VMware ESXi=6.0
VMware ESXi=6.0-1
VMware ESXi=6.0-1a
VMware ESXi=6.0-1b
VMware ESXi=6.0-2
VMware ESXi=6.0-3
VMware ESXi=6.0-3a
VMware ESXi=6.0-600-201504401
VMware ESXi=6.0-600-201505401
VMware ESXi=6.0-600-201507101
VMware ESXi=6.0-600-201507102
VMware ESXi=6.0-600-201507401
VMware ESXi=6.0-600-201507402
VMware ESXi=6.0-600-201507403
VMware ESXi=6.0-600-201507404
VMware ESXi=6.0-600-201507405
VMware ESXi=6.0-600-201507406
VMware ESXi=6.0-600-201507407
VMware ESXi=6.0-600-201509101
VMware ESXi=6.0-600-201509102
VMware ESXi=6.0-600-201509201
VMware ESXi=6.0-600-201509202
VMware ESXi=6.0-600-201509203
VMware ESXi=6.0-600-201509204
VMware ESXi=6.0-600-201509205
VMware ESXi=6.0-600-201509206
VMware ESXi=6.0-600-201509207
VMware ESXi=6.0-600-201509208
VMware ESXi=6.0-600-201509209
VMware ESXi=6.0-600-201509210
VMware ESXi=6.0-600-201510401
VMware ESXi=6.0-600-201511401
VMware ESXi=6.0-600-201601101
VMware ESXi=6.0-600-201601102
VMware ESXi=6.0-600-201601401
VMware ESXi=6.0-600-201601402
VMware ESXi=6.0-600-201601403
VMware ESXi=6.0-600-201601404
VMware ESXi=6.0-600-201601405
VMware ESXi=6.0-600-201602401
VMware ESXi=6.0-600-201603101
VMware ESXi=6.0-600-201603102
VMware ESXi=6.0-600-201603201
VMware ESXi=6.0-600-201603202
VMware ESXi=6.0-600-201603203
VMware ESXi=6.0-600-201603204
VMware ESXi=6.0-600-201603205
VMware ESXi=6.0-600-201603206
VMware ESXi=6.0-600-201603207
VMware ESXi=6.0-600-201603208
VMware ESXi=6.0-600-201605401
VMware ESXi=6.0-600-201608101
VMware ESXi=6.0-600-201608401
VMware ESXi=6.0-600-201608402
VMware ESXi=6.0-600-201608403
VMware ESXi=6.0-600-201608404
VMware ESXi=6.0-600-201608405
VMware ESXi=6.0-600-201610410
VMware ESXi=6.0-600-201611401
VMware ESXi=6.0-600-201611402
VMware ESXi=6.0-600-201611403
VMware ESXi=6.0-600-201702101
VMware ESXi=6.0-600-201702102
VMware ESXi=6.0-600-201702201
VMware ESXi=6.0-600-201702202
VMware ESXi=6.0-600-201702203
VMware ESXi=6.0-600-201702204
VMware ESXi=6.0-600-201702205
VMware ESXi=6.0-600-201702206
VMware ESXi=6.0-600-201702207
VMware ESXi=6.0-600-201702208
VMware ESXi=6.0-600-201702209
VMware ESXi=6.0-600-201702210
VMware ESXi=6.0-600-201702211
VMware ESXi=6.0-600-201702212
VMware ESXi=6.0-600-201703401
VMware ESXi=6.0-600-201706101
VMware ESXi=6.0-600-201706102
VMware ESXi=6.0-600-201706103
VMware ESXi=6.0-600-201706401
VMware ESXi=6.0-600-201706402
VMware ESXi=6.0-600-201706403
VMware ESXi=6.0-600-201710301
VMware ESXi=6.0-600-201811001
VMware ESXi=6.0-600-201811401
VMware ESXi=6.0-600-201903001
VMware ESXi=6.0-600-201905001
VMware ESXi=6.0-600-201909001
VMware ESXi=6.5
VMware ESXi=6.5-2
VMware ESXi=6.5-650-201701001
VMware ESXi=6.5-650-201703001
VMware ESXi=6.5-650-201703002
VMware ESXi=6.5-650-201704001
VMware ESXi=6.5-650-201707101
VMware ESXi=6.5-650-201707102
VMware ESXi=6.5-650-201707103
VMware ESXi=6.5-650-201707201
VMware ESXi=6.5-650-201707202
VMware ESXi=6.5-650-201707203
VMware ESXi=6.5-650-201707204
VMware ESXi=6.5-650-201707205
VMware ESXi=6.5-650-201707206
VMware ESXi=6.5-650-201707207
VMware ESXi=6.5-650-201707208
VMware ESXi=6.5-650-201707209
VMware ESXi=6.5-650-201707210
VMware ESXi=6.5-650-201707211
VMware ESXi=6.5-650-201707212
VMware ESXi=6.5-650-201707213
VMware ESXi=6.5-650-201707214
VMware ESXi=6.5-650-201707215
VMware ESXi=6.5-650-201707216
VMware ESXi=6.5-650-201707217
VMware ESXi=6.5-650-201707218
VMware ESXi=6.5-650-201707219
VMware ESXi=6.5-650-201707220
VMware ESXi=6.5-650-201707221
VMware ESXi=6.5-650-201710001
VMware ESXi=6.5-650-201712001
VMware ESXi=6.5-650-201803001
VMware ESXi=6.5-650-201806001
VMware ESXi=6.5-650-201808001
VMware ESXi=6.5-650-201810001
VMware ESXi=6.5-650-201810002
VMware ESXi=6.5-650-201811001
VMware ESXi=6.5-650-201811002
VMware ESXi=6.5-650-201811301
VMware ESXi=6.5-650-201901001
VMware ESXi=6.5-650-201903001
VMware ESXi=6.7
VMware ESXi=6.7-670-201806001
VMware ESXi=6.7-670-201807001
VMware ESXi=6.7-670-201808001
VMware ESXi=6.7-670-201810001
VMware ESXi=6.7-670-201810101
VMware ESXi=6.7-670-201810102
VMware ESXi=6.7-670-201810103
VMware ESXi=6.7-670-201810201
VMware ESXi=6.7-670-201810202
VMware ESXi=6.7-670-201810203
VMware ESXi=6.7-670-201810204
VMware ESXi=6.7-670-201810205
VMware ESXi=6.7-670-201810206
VMware ESXi=6.7-670-201810207
VMware ESXi=6.7-670-201810208
VMware ESXi=6.7-670-201810209
VMware ESXi=6.7-670-201810210
VMware ESXi=6.7-670-201810211
VMware ESXi=6.7-670-201810212
VMware ESXi=6.7-670-201810213
VMware ESXi=6.7-670-201810214
VMware ESXi=6.7-670-201810215
VMware ESXi=6.7-670-201810216
VMware ESXi=6.7-670-201810217
VMware ESXi=6.7-670-201810218
VMware ESXi=6.7-670-201810219
VMware ESXi=6.7-670-201810220
VMware ESXi=6.7-670-201810221
VMware ESXi=6.7-670-201810222
VMware ESXi=6.7-670-201810223
VMware ESXi=6.7-670-201810224
VMware ESXi=6.7-670-201810225
VMware ESXi=6.7-670-201810226
VMware ESXi=6.7-670-201810227
VMware ESXi=6.7-670-201810228
VMware ESXi=6.7-670-201810229
VMware ESXi=6.7-670-201810230
VMware ESXi=6.7-670-201810231
VMware ESXi=6.7-670-201810232
VMware ESXi=6.7-670-201810233
VMware ESXi=6.7-670-201810234
VMware ESXi=6.7-670-201811001
VMware ESXi=6.7-670-201901001
VMware ESXi=6.7-670-201901401
VMware ESXi=6.7-670-201901402
VMware ESXi=6.7-670-201901403
VMware ESXi=6.7-670-201903001
VMware ESXi=6.7-670-201904001
Event History
Oct 10, 2019
CVE Published
via MITRE·04:28 PM
Data Sourced
via MITRE·04:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5527?
The severity of CVE-2019-5527 is classified as Important, with a maximum CVSSv3 base score of 8.5.
2
How do I fix CVE-2019-5527?
To fix CVE-2019-5527, it is recommended to update VMware ESXi, Workstation, Fusion, VMRC, or Horizon Client to the patched versions provided by VMware.
3
Which products are affected by CVE-2019-5527?
CVE-2019-5527 affects VMware ESXi, Workstation, Fusion, VMRC, and Horizon Client versions up to a certain release.
4
Is there a workaround for CVE-2019-5527?
There are no known workarounds for CVE-2019-5527; the best mitigation is to apply the necessary updates.
5
What are the potential impacts of CVE-2019-5527?
Exploiting CVE-2019-5527 could allow an attacker to execute arbitrary code on the affected system due to the use-after-free vulnerability.