Number: AV18-106
Date: 03 July 2018
Purpose
The purpose of this advisory is to bring attention to a security advisory released by VMware.
Assessment
VMware has released product updates for VMware ESXi, Workstation, and Fusion to address multiple out-of-bounds read vulnerabilities.
Affected Products:
- VMware vSphere ESXi (ESXi)
- VMware Workstation Pro / Player (Workstation)
- VMware Fusion Pro, Fusion (Fusion)
CVE References: CVE-2018-6965, CVE-2018-6966, CVE-2018-6967
Suggested action
CCIRC recommends that system administrators test and deploy the vendor released updates on affected platforms accordingly.
References
https://www.vmware.com/security/advisories/VMSA-2018-0016.html