Security Alert (A18-11-08): Vulnerability in VMware Products

Description:

VMware has published a security advisory to address an integer overflow vulnerability in the virtual network devices.

Affected Systems:

• VMware Workstation version 14.x and 15.x
• VMware Fusion version 10.x and 11.x

Impact:

Successful exploitation of the vulnerability could allow a guest to execute code on the host.

Recommendation:

The product vendor has released new versions to address the issue at the following website:

• VMware Workstation Pro 14.1.5, 15.0.2
  https://www.vmware.com/go/downloadworkstation
  
  
• VMware Workstation Player 14.1.5, 15.0.2
  https://www.vmware.com/go/downloadplayer
  
  
• VMware Fusion Pro / Fusion 10.1.5, 11.0.2
  https://www.vmware.com/go/downloadfusion
  
  

System administrators may contact their product support vendors for the fixes and assistance.

More Information:

https://www.vmware.com/security/advisories/VMSA-2018-0030.html
https://www.us-cert.gov/ncas/current-activity/2018/11/22/VMware-Releases-Security-Updates
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6983