VMSA-2018-0026

VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability

VMware Security Advisory

VMware Security Advisory Advisory ID:

VMSA-2018-0026

VMware Security Advisory Severity:

Critical

VMware Security Advisory Synopsis:

VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability

VMware Security Advisory Issue date:

2018-10-16

VMware Security Advisory Updated on:

2018-10-16 (Initial Advisory)

VMware Security Advisory CVE numbers:

CVE-2018-6974

1. Summary

VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability

2. Relevant Products

VMware vSphere ESXi (ESXi)
VMware Workstation Pro / Player (Workstation)
VMware Fusion Pro, Fusion (Fusion)

3. Problem Description

Out-of-bounds read vulnerability in SVGA Device

VMware ESXi, Fusion and Workstation contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.

VMware would like to thank Anonymous working with Trend Micro's Zero Day Initiative for reporting this issue to us.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2018-6974 to this issue.

Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.

VMware Product

Product Version

Running on

Severity

Replace with/ Apply Patch

Mitigation/ Workaround

VMware Product ESXi

Product Version 6.7

Running on ESXi

Severity Critical

Replace with/ Apply Patch ESXi670-201810101-SG

Mitigation/ Workaround None

VMware Product ESXi

Product Version 6.5

Running on ESXi

Severity Critical

Replace with/ Apply Patch ESXi650-201808401-BG

Mitigation/ Workaround None

VMware Product ESXi

Product Version 6.0

Running on ESXi

Severity Critical

Replace with/ Apply Patch ESXi600-201808401-BG

Mitigation/ Workaround None

VMware Product ESXi

Product Version 5.5

Running on ESXi

Severity N/A

Replace with/ Apply Patch not affected

Mitigation/ Workaround N/A

VMware Product Workstation

Product Version 15.x

Running on Any

Severity N/A

Replace with/ Apply Patch not affected

Mitigation/ Workaround N/A

VMware Product Workstation

Product Version 14.x

Running on Any

Severity Critical

Replace with/ Apply Patch 14.1.3

Mitigation/ Workaround None

VMware Product Fusion

Product Version 11.x

Running on OS X

Severity N/A

Replace with/ Apply Patch not affected

Mitigation/ Workaround N/A

VMware Product Fusion

Product Version 10.x

Running on OS X

Severity Critical

Replace with/ Apply Patch 10.1.3

Mitigation/ Workaround None

4. Solution

Please review the patch/release notes for your product and version and verify the checksum of your downloaded file.

   ESXi 6.7
   -------------
   Downloads:
   https://my.vmware.com/group/vmware/patch
   Documentation:
   https://docs.vmware.com/en/VMware-vSphere/6.7/rn/vsphere-esxi-671-release-

   notes.html#esxi670-201810101-sg-resolved

   ESXi 6.5
   -------------
   Downloads:
   https://my.vmware.com/group/vmware/patch
   Documentation:
   http://kb.vmware.com/kb/56547

   ESXi 6.0
   -------------
   Downloads:
   https://my.vmware.com/group/vmware/patch
   Documentation:
   http://kb.vmware.com/kb/56552