5.5
CVSSv3

CVE-2017-4925

Published: 15/09/2017 Updated: 03/02/2022
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x prior to 12.5.3), Fusion (8.x prior to 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

vmware esxi 5.5

vmware esxi 6.0

vmware esxi 6.5

vmware workstation

vmware workstation pro

vmware fusion