Integer overflow in Apple Mac_os_x
CVE-2018-6983
VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on…
Vulnerability class: Integer Overflow
EPSS: 0.005 (36.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Apple Mac_os_x
- Vmware Fusion
- Vmware Workstation And Fusion — versions VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5)
- Vmware Workstation
Weakness classification (CWE)
References
- security@vmware.com (x_refsource_CONFIRM, Vendor Advisory)
- security@vmware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-6983?
- CVE-2018-6983 is a high-severity vulnerability in Apple Mac_os_x, classified under Integer Overflow or Wraparound. CVSS score: 8.8/10. Published 2018-11-27.
- How severe is CVE-2018-6983?
- High severity. CVSS v3 base score is 8.8 out of 10.