Use-after-free in VMware, Inc products - CVE-2020-4004

Vulnerability identifier: #VU48602

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-4004

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in the XHCI USB controller. A local administrator can execute arbitrary code as the virtual machine's VMX process running on the host

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Cloud Foundation
VMware Fusion
VMware Workstation
VMware ESXi
Dell Enterprise Hybrid Cloud
Dell EMC VxRail Appliance

Install updates from vendor's website.

VMware ESXi - addressed in versions ESXi650-202011301-SG, ESXi670-202011101-SG, ESXi70U1b-17168206
VMware Fusion - update to 11.5.7
VMware Workstation - update to 15.5.7
Dell Enterprise Hybrid Cloud - update to 4.1.2
Dell EMC VxRail Appliance - addressed in versions 4.5.452, 4.7.525, 7.0.101

• https://www.vmware.com/security/advisories/VMSA-2020-0026.html

• Multiple vulnerabiities in VMware products
• Multiple vulnerabilities in Dell EMC Enterprise Hybrid Cloud
• Multiple vulnerabilities in Dell VxRail Appliance