CVE-2018-6982

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@vmware.com

Published

2018-12-04

Last modified

2024-08-05

Weaknesses

CWE-908

Affected products

• Esxi (Vmware)
• Fusion (Vmware)
• Vmware Esxi (Vmware)
• Workstation (Vmware)

References

• http://www.securityfocus.com/bid/105882
• http://www.securitytracker.com/id/1042055
• https://www.vmware.com/security/advisories/VMSA-2018-0027.html