Information disclosure in VMware Horizon
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2018-6970 |
| CWE-ID | CWE-125 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
VMware Horizon Server applications / Virtualization software |
| Vendor | VMware, Inc |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Out-of-bounds read
EUVDB-ID: #VU14221
Risk: Low
CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2018-6970
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to obtain potentially sensitive information.
The vulnerability exists due to out-of-bounds read in the Message Framework library. A local attacker can obtain data from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed.
MitigationThe vulnerability has been addressed in the versions 4.8.1, 6.2.7, 7.5.1.
Vulnerable software versionsVMware Horizon: 4.0 - 7.5
External linkshttp://www.vmware.com/security/advisories/VMSA-2018-0019.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
