Buffer overflow in VMware Fusion
CVE-2019-5515
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but it is more likely to result in a denial of service of the guest.
Vulnerability class: Buffer Overflow
EPSS: 0.042 (90.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Vmware Fusion
- Vmware Workstation And Fusion — versions Workstation 15.x before 15.0.3, Workstation 14.x before 14.1.6, Fusion 11.x before 11.0.3
- Vmware Workstation
Weakness classification (CWE)
References
- security@vmware.com (x_refsource_CONFIRM, Vendor Advisory)
- security@vmware.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
- security@vmware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- security@vmware.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
- security@vmware.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-5515?
- CVE-2019-5515 is a high-severity vulnerability in VMware Fusion, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2019-04-02.
- How severe is CVE-2019-5515?
- High severity. CVSS v3 base score is 8.8 out of 10.