First published: Wed Nov 20 2019(Updated: )
VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM.
Credit: security@vmware.com
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Fusion | >=11.0.0<11.5.1 | |
VMware Workstation | >=15.0.0<15.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2019-5542.
VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) are affected.
The severity of CVE-2019-5542 is high (7.7 out of 10).
Successful exploitation of this vulnerability may allow attackers with normal user privileges to create a denial-of-service condition on their own VM.
Yes, upgrading to VMware Workstation 15.5.1 or Fusion 11.5.1 will fix this vulnerability.