CVE-2020-3960

Published: 15/09/2021 Updated: 28/09/2021

CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 8.4 | Impact Score: 5.8 | Exploitability Score: 2

VMScore: 321

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P

VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x prior to 15.5.5), and Fusion (11.x prior to 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a virtual NVMe controller present may be able to read privileged information contained in physical memory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware vsphere esxi 6.5
vmware fusion
vmware workstation
vmware vsphere esxi 6.7

Overview ======= We identified several security issues in the ESIx virtual machine monitor (VMM): a use-after-free (UAF) vulnerability in PVNVRAM, a missing return value check in EHCI USB controller leading to private heap information disclosure, and several OOB reads All issues have been fixed by the vendor Links to the patches are provided bel ...

CWE-125 https://www.vmware.com/security/advisories/VMSA-2020-0012.html https://nvd.nist.gov http://seclists.org/fulldisclosure/2020/Jul/22

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-3960

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect