Out-of-bounds read in VMware Tools - CVE-2018-6969
Published: July 13, 2018 / Updated: July 14, 2018
Vulnerability identifier: #VU13867
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-6969
CWE-ID: CWE-125
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vendor: VMware, Inc
Affected software:
VMware Tools
VMware Tools
Detailed vulnerability description
The vulnerability allows an adjacent attacker to obtain potentially sensitive information or gain elevated privileges on the target system.
The vulnerability exists due to out-of-bounds memory read error in HGFS. An adjacent attacker can obtain potentially sensitive information or gain elevated privileges.
How to mitigate CVE-2018-6969
Update to version 10.3.0.