SB2018072301 - Multiple vulnerabilities in VMware Horizon

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018072301

SB2018072301 - Multiple vulnerabilities in VMware Horizon

Published: July 23, 2018

Security Bulletin ID SB2018072301
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Adjecent network
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 vulnerabilities.


1) Null pointer dereference (CVE-ID: CVE-2018-6972)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The vulnerability exists due to NULL pointer dereference in the RPC handler. An adjacent attacker can cause the virtual machine to crash.


2) Information disclosure (CVE-ID: CVE-2018-6971)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local attacker to obtain potentially sensitive information on the target system.

The vulnerability exists due to the system logs authentication credentials in the 'vmmsi.log' log file when an account other than the current user account is specified during installation. A local attacker can view the passwords.


Remediation

Install update from vendor's website.

References