First published: Thu Oct 10 2019(Updated: )
VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7.
Credit: security@vmware.com
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Fusion | >=11.0.0<11.5.0 | |
VMware Workstation | >=15.0.0<15.5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2019-5535.
The title of this vulnerability is 'VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets'.
The severity of CVE-2019-5535 is in the Moderate range with a maximum CVSSv3 base score of 4.7.
VMware Fusion versions 11.0.0 to 11.5.0 and VMware Workstation versions 15.0.0 to 15.5.0 are affected by CVE-2019-5535.
To mitigate the vulnerability, it is recommended to update VMware Fusion to version 11.5.1 and VMware Workstation to version 15.5.1 or later.