Out-of-bounds write in VMware ESXi - CVE-2020-3982
Published: October 20, 2020 / Updated: December 14, 2022
Vulnerability identifier: #VU47749
CSH Severity: High
CVSS v4: 8.5 [CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3982
CWE-ID: CWE-787
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error caused by a time-of-check time-of-use issue in ACPI device within the implementation of the BDOOR_CMD_PATCH_ACPI_TABLES command. A remote administrator on the guest OS can run a specially crafted program to trigger a heap-based buffer overflow and crash the system or execute arbitrary code on the hypervisor.
Affected software
VMware ESXi
VMware Fusion
VMware Workstation
Dell EMC VxRail Appliance
VMware Fusion
VMware Workstation
Dell EMC VxRail Appliance
How to mitigate CVE-2020-3982
Install updates from vendor's website.
VMware ESXi - addressed in versions ESXi_7.0.1-0.0.16850804, ESXi650-202007101-SG, ESXi670-202008101-SG
VMware Fusion - update to 11.5.6
VMware Workstation - update to 15.5.7
Dell EMC VxRail Appliance - addressed in versions 4.5.452, 4.7.525, 7.0.101
VMware Fusion - update to 11.5.6
VMware Workstation - update to 15.5.7
Dell EMC VxRail Appliance - addressed in versions 4.5.452, 4.7.525, 7.0.101