VMware Updates
3234Warning Date
Severity Level
Warning Number
Target Sector
13 November, 2019
● High
2019-618
All
Description:
VMware has released security updates to address multiple vulnerabilities in the following products:
- VMware ESXi Versions 6.7, 6.5, 6.0
- Workstation All versions 15.x
- Fusion All versions 11.x
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS).
- Disclose sensitive information.
- Trigger a purple diagnostic screen or immediate reboot of the Hypervisor hosting the virtual machine
- Execute arbitrary code.
Best practice and Recommendations
The CERT team encourages users to review VMware security advisory and apply the necessary updates: