Vulnerability-Lookup

CVE-2017-4905 (GCVE-0-2017-4905)

Vulnerability from cvelistv5 – Published: 2017-06-07 18:00 – Updated: 2024-08-05 14:39

Summary

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

Information leak

Assigner

vmware CNA under the mitre root

CNA scorecard C 64/100 over 228 records in the last 180 days details

References

4 references

URL	Tags
http://www.securityfocus.com/bid/97164	vdb-entryx_refsource_BID
http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1038148	vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1038149	vdb-entryx_refsource_SECTRACK

Impacted products

3 products

Vendor	Product	Version	CPE status
VMware	ESXi	Affected: 6.5 without patch ESXi650-201703410-SG Affected: 6.0 U3 without patch ESXi600-201703401-SG Affected: 6.0 U2 without patch ESXi600-201703403-SG Affected: 6.0 U1 without patch ESXi600-201703402-SG Affected: 5.5 without patch ESXi550-201703401-SG	guessed
VMware	Workstation Pro / Player	Affected: 12.x prior to 12.5.5	guessed
VMware	Fusion Pro / Fusion	Affected: 8.x prior to 8.5.6	guessed

Date Public

2017-03-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:41.549Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "97164",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97164"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
          },
          {
            "name": "1038148",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038148"
          },
          {
            "name": "1038149",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038149"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ESXi",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "6.5 without patch ESXi650-201703410-SG"
            },
            {
              "status": "affected",
              "version": "6.0 U3 without patch ESXi600-201703401-SG"
            },
            {
              "status": "affected",
              "version": "6.0 U2 without patch ESXi600-201703403-SG"
            },
            {
              "status": "affected",
              "version": "6.0 U1 without patch ESXi600-201703402-SG"
            },
            {
              "status": "affected",
              "version": "5.5 without patch ESXi550-201703401-SG"
            }
          ]
        },
        {
          "product": "Workstation Pro / Player",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "12.x prior to 12.5.5"
            }
          ]
        },
        {
          "product": "Fusion Pro / Fusion",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "8.x prior to 8.5.6"
            }
          ]
        }
      ],
      "datePublic": "2017-03-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information leak",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-11T09:57:01.000Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "name": "97164",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97164"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
        },
        {
          "name": "1038148",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038148"
        },
        {
          "name": "1038149",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038149"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@vmware.com",
          "ID": "CVE-2017-4905",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ESXi",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "6.5 without patch ESXi650-201703410-SG"
                          },
                          {
                            "version_value": "6.0 U3 without patch ESXi600-201703401-SG"
                          },
                          {
                            "version_value": "6.0 U2 without patch ESXi600-201703403-SG"
                          },
                          {
                            "version_value": "6.0 U1 without patch ESXi600-201703402-SG"
                          },
                          {
                            "version_value": "5.5 without patch ESXi550-201703401-SG"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Workstation Pro / Player",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "12.x prior to 12.5.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Fusion Pro / Fusion",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "8.x prior to 8.5.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "VMware"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information leak"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "97164",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97164"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
            },
            {
              "name": "1038148",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038148"
            },
            {
              "name": "1038149",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038149"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2017-4905",
    "datePublished": "2017-06-07T18:00:00.000Z",
    "dateReserved": "2016-12-26T00:00:00.000Z",
    "dateUpdated": "2024-08-05T14:39:41.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2017-4905",
      "date": "2026-10-29",
      "epss": "0.01204",
      "percentile": "0.68186"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C05F1671-5010-4BB5-BFA7-217FBB946B59",
                    "versionEndExcluding": "8.5.6",
                    "versionStartIncluding": "8.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB3E0004-E6F1-4C0D-9B24-A7F1AF4BCBD8",
                    "versionEndExcluding": "8.5.6",
                    "versionStartIncluding": "8.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5DB0B91B-F8F6-456F-8FBD-7B98A9ABA95A",
                    "versionEndExcluding": "12.5.5",
                    "versionStartIncluding": "12.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "17F1AB0A-CD31-4FE7-AE1F-4C6A111D1C62",
                    "versionEndExcluding": "12.5.5",
                    "versionStartIncluding": "12.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
                    "matchCriteriaId": "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
                    "matchCriteriaId": "4DC223AC-EB3D-48CF-A6CC-D35E00A38394",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
                    "matchCriteriaId": "75C8E87E-A869-49F8-89F9-DE64A45CDB35",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
                    "matchCriteriaId": "E7F8878C-F73D-4549-9607-74880176D2B0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
                    "matchCriteriaId": "E47D369F-13B2-42B3-BB74-60AAD0954B26",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "3E8861F4-D390-4738-BBF0-9EE4684E9667",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
                    "matchCriteriaId": "52403C80-3022-4E5B-B16A-24B116D1E6B9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
                    "matchCriteriaId": "FBECED2E-05FD-492E-8B57-9BB8ADA82444",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
                    "matchCriteriaId": "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
                    "matchCriteriaId": "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
                    "matchCriteriaId": "9159F6E1-6A36-4D3C-85B1-2205B90CD244",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
                    "matchCriteriaId": "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
                    "matchCriteriaId": "FBA15143-734D-4889-8B5A-2445A2DDDD4B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
          },
          {
            "lang": "es",
            "value": "ESXi versiones 6.5 sin parche ESXi650-201703410-SG, 6.0 U3 sin parche ESXi600-201703401-SG, 6.0 U2 sin parche ESXi600-201703403-SG, 6.0 U1 sin parche ESXi600-201703402-SG, 5.5 sin parche ESXi550-201701401-SG;  Workstation Pro / Player versiones 12.x anteriores a 12.5.5; y Fusion Pro / Fusion versiones 8.x anteriores a 8.5.6 de VMware, presenta un uso de memoria no inicializada. Este problema puede conducir a un filtrado de informaci\u00f3n."
          }
        ],
        "id": "CVE-2017-4905",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 2.1,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "NONE",
                "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-06-07T18:29:00.413",
        "references": [
          {
            "source": "security@vmware.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/97164"
          },
          {
            "source": "security@vmware.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1038148"
          },
          {
            "source": "security@vmware.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1038149"
          },
          {
            "source": "security@vmware.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/97164"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1038148"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id/1038149"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
          }
        ],
        "sourceIdentifier": "security@vmware.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-908"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTFR-2017-AVI-093

Vulnerability from certfr_avis - Published: 2017-03-29 - Updated: 2017-03-29

De multiples vulnérabilités ont été corrigées dans les produits VMware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
VMware	ESXi	VMware ESXi versions 6.5 sans le correctif de sécurité ESXi650-201703410-SG
VMware	ESXi	VMware ESXi versions 6.0 U3 sans le correctif de sécurité ESXi600-201703401-SG
VMware	Fusion	Fusion pour OSX versions antérieures à 8.5.6
VMware	ESXi	VMware ESXi versions 5.5 sans le correctif de sécurité ESXi550-201703401-SG
VMware	ESXi	VMware ESXi versions 6.0 U1 sans le correctif de sécurité KB 2149672
VMware	N/A	Workstation versions antérieures à 12.5.5
VMware	ESXi	VMware ESXi versions 6.0 U2 sans le correctif de sécurité KB 2149673

References

Title

Publication Time

CNVD-2017-05636

Vulnerability from cnvd - Published: 2017-04-29

Title

多个VMware产品本地信息泄露漏洞

Description

VMware软件公司提供云计算和硬件虚拟化的软件和服务。多个VMware存在本地信息泄露漏洞，可使攻击者利用此漏洞获取敏感信息。

Severity

低

Patch Name

多个VMware产品本地信息泄露漏洞的补丁

Patch Description

VMware软件公司提供云计算和硬件虚拟化的软件和服务。多个VMware存在本地信息泄露漏洞，可使攻击者利用此漏洞获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下厂商提供的安全补丁以修复该漏洞：http://www.vmware.com/security/advisories/VMSA-2017-0006.html

Reference

http://www.securityfocus.com/bid/97164

Impacted products

Name
['VMWare ESXi 5.5', 'VMware Workstation 12.0', 'VMware Fusion 8.1', 'VMware Fusion 8.0.2', 'VMware Fusion 8.0.1', 'VMware Fusion 8.5.5', 'VMware Fusion 8.5', 'VMware Fusion 8.0', 'VMware Esxi 6.0 u1', 'VMware Esxi 6.0 U2', 'VMware Esxi 6.0 U3', 'VMware Esxi 6.5']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "97164"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-4905",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4905"
    }
  },
  "description": "VMware\u8f6f\u4ef6\u516c\u53f8\u63d0\u4f9b\u4e91\u8ba1\u7b97\u548c\u786c\u4ef6\u865a\u62df\u5316\u7684\u8f6f\u4ef6\u548c\u670d\u52a1\u3002\r\n\r\n\u591a\u4e2aVMware\u5b58\u5728\u672c\u5730\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u53ef\u4f7f\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "ZDI and Team Sniper from Tencent Security.",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1ahttp://www.vmware.com/security/advisories/VMSA-2017-0006.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-05636",
  "openTime": "2017-04-29",
  "patchDescription": "VMware\u8f6f\u4ef6\u516c\u53f8\u63d0\u4f9b\u4e91\u8ba1\u7b97\u548c\u786c\u4ef6\u865a\u62df\u5316\u7684\u8f6f\u4ef6\u548c\u670d\u52a1\u3002\r\n\r\n\u591a\u4e2aVMware\u5b58\u5728\u672c\u5730\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u53ef\u4f7f\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u4e2aVMware\u4ea7\u54c1\u672c\u5730\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "VMWare ESXi 5.5",
      "VMware Workstation 12.0",
      "VMware Fusion 8.1",
      "VMware Fusion 8.0.2",
      "VMware Fusion 8.0.1",
      "VMware Fusion 8.5.5",
      "VMware Fusion 8.5",
      "VMware Fusion 8.0",
      "VMware Esxi 6.0 u1",
      "VMware Esxi 6.0 U2",
      "VMware Esxi 6.0 U3",
      "VMware Esxi 6.5"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/97164",
  "serverity": "\u4f4e",
  "submitTime": "2017-03-30",
  "title": "\u591a\u4e2aVMware\u4ea7\u54c1\u672c\u5730\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

FKIE_CVE-2017-4905

Vulnerability from fkie_nvd - Published: 2017-06-07 18:29 - Updated: 2026-06-17 01:19

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

References

URL	Tags
security@vmware.com	http://www.securityfocus.com/bid/97164	Third Party Advisory, VDB Entry
security@vmware.com	http://www.securitytracker.com/id/1038148	Third Party Advisory, VDB Entry
security@vmware.com	http://www.securitytracker.com/id/1038149	Third Party Advisory, VDB Entry
security@vmware.com	http://www.vmware.com/security/advisories/VMSA-2017-0006.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/97164	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1038148	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1038149	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/security/advisories/VMSA-2017-0006.html	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
vmware	fusion	*
vmware	fusion_pro	*
apple	mac_os_x	-
vmware	workstation_player	*
vmware	workstation_pro	*
vmware	esxi	5.5
vmware	esxi	5.5
vmware	esxi	5.5
vmware	esxi	5.5
vmware	esxi	5.5
vmware	esxi	6.0
vmware	esxi	6.0
vmware	esxi	6.0
vmware	esxi	6.0
vmware	esxi	6.0
vmware	esxi	6.0
vmware	esxi	6.0
vmware	esxi	6.5

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "ESXi",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "6.5 without patch ESXi650-201703410-SG"
            },
            {
              "status": "affected",
              "version": "6.0 U3 without patch ESXi600-201703401-SG"
            },
            {
              "status": "affected",
              "version": "6.0 U2 without patch ESXi600-201703403-SG"
            },
            {
              "status": "affected",
              "version": "6.0 U1 without patch ESXi600-201703402-SG"
            },
            {
              "status": "affected",
              "version": "5.5 without patch ESXi550-201703401-SG"
            }
          ]
        },
        {
          "product": "Workstation Pro / Player",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "12.x prior to 12.5.5"
            }
          ]
        },
        {
          "product": "Fusion Pro / Fusion",
          "vendor": "VMware",
          "versions": [
            {
              "status": "affected",
              "version": "8.x prior to 8.5.6"
            }
          ]
        }
      ],
      "source": "security@vmware.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C05F1671-5010-4BB5-BFA7-217FBB946B59",
              "versionEndExcluding": "8.5.6",
              "versionStartIncluding": "8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB3E0004-E6F1-4C0D-9B24-A7F1AF4BCBD8",
              "versionEndExcluding": "8.5.6",
              "versionStartIncluding": "8.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DB0B91B-F8F6-456F-8FBD-7B98A9ABA95A",
              "versionEndExcluding": "12.5.5",
              "versionStartIncluding": "12.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17F1AB0A-CD31-4FE7-AE1F-4C6A111D1C62",
              "versionEndExcluding": "12.5.5",
              "versionStartIncluding": "12.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
              "matchCriteriaId": "BB90FDCA-A848-4D4D-8A6F-FD04D702EC85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
              "matchCriteriaId": "4DC223AC-EB3D-48CF-A6CC-D35E00A38394",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
              "matchCriteriaId": "75C8E87E-A869-49F8-89F9-DE64A45CDB35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
              "matchCriteriaId": "E7F8878C-F73D-4549-9607-74880176D2B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
              "matchCriteriaId": "E47D369F-13B2-42B3-BB74-60AAD0954B26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "3E8861F4-D390-4738-BBF0-9EE4684E9667",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
              "matchCriteriaId": "52403C80-3022-4E5B-B16A-24B116D1E6B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
              "matchCriteriaId": "FBECED2E-05FD-492E-8B57-9BB8ADA82444",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
              "matchCriteriaId": "3C3FBBA4-01FA-45B5-AEDF-FFFE941163FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
              "matchCriteriaId": "A63E3C72-3145-4661-BBCD-8A67EC0CDDF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
              "matchCriteriaId": "9159F6E1-6A36-4D3C-85B1-2205B90CD244",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
              "matchCriteriaId": "C2C08C24-FBAC-49B8-AABF-4FF8BADA3412",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
              "matchCriteriaId": "FBA15143-734D-4889-8B5A-2445A2DDDD4B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
    },
    {
      "lang": "es",
      "value": "ESXi versiones 6.5 sin parche ESXi650-201703410-SG, 6.0 U3 sin parche ESXi600-201703401-SG, 6.0 U2 sin parche ESXi600-201703403-SG, 6.0 U1 sin parche ESXi600-201703402-SG, 5.5 sin parche ESXi550-201701401-SG;  Workstation Pro / Player versiones 12.x anteriores a 12.5.5; y Fusion Pro / Fusion versiones 8.x anteriores a 8.5.6 de VMware, presenta un uso de memoria no inicializada. Este problema puede conducir a un filtrado de informaci\u00f3n."
    }
  ],
  "id": "CVE-2017-4905",
  "lastModified": "2026-06-17T01:19:32.140",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-06-07T18:29:00.413",
  "references": [
    {
      "source": "security@vmware.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/97164"
    },
    {
      "source": "security@vmware.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038148"
    },
    {
      "source": "security@vmware.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038149"
    },
    {
      "source": "security@vmware.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/97164"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038148"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038149"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
    }
  ],
  "sourceIdentifier": "security@vmware.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-VV24-23FC-H8GH

Vulnerability from github – Published: 2022-05-13 01:03 – Updated: 2022-05-13 01:03

Details

Severity

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2017-4905"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-908"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-06-07T18:29:00Z",
    "severity": "MODERATE"
  },
  "details": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.",
  "id": "GHSA-vv24-23fc-h8gh",
  "modified": "2022-05-13T01:03:59Z",
  "published": "2022-05-13T01:03:59Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-4905"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/97164"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1038148"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1038149"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2017-4905

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2017-4905

Aliases

CVE-2017-4905

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2017-4905",
    "description": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.",
    "id": "GSD-2017-4905"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-4905"
      ],
      "details": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.",
      "id": "GSD-2017-4905",
      "modified": "2023-12-13T01:21:02.707637Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@vmware.com",
        "ID": "CVE-2017-4905",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "ESXi",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "6.5 without patch ESXi650-201703410-SG"
                        },
                        {
                          "version_value": "6.0 U3 without patch ESXi600-201703401-SG"
                        },
                        {
                          "version_value": "6.0 U2 without patch ESXi600-201703403-SG"
                        },
                        {
                          "version_value": "6.0 U1 without patch ESXi600-201703402-SG"
                        },
                        {
                          "version_value": "5.5 without patch ESXi550-201703401-SG"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Workstation Pro / Player",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "12.x prior to 12.5.5"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Fusion Pro / Fusion",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "8.x prior to 8.5.6"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "VMware"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Information leak"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "97164",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/97164"
          },
          {
            "name": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
            "refsource": "CONFIRM",
            "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
          },
          {
            "name": "1038148",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1038148"
          },
          {
            "name": "1038149",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1038149"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "8.5.6",
                    "versionStartIncluding": "8.0.0",
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "8.5.6",
                    "versionStartIncluding": "8.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.5.5",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.5.5",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:5.5:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:5.5:1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:5.5:2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:5.5:3a:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:5.5:3b:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@vmware.com",
          "ID": "CVE-2017-4905"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-908"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.vmware.com/security/advisories/VMSA-2017-0006.html"
            },
            {
              "name": "97164",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/97164"
            },
            {
              "name": "1038149",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1038149"
            },
            {
              "name": "1038148",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1038148"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-02-07T15:19Z",
      "publishedDate": "2017-06-07T18:29Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2017-4905 (GCVE-0-2017-4905)

CERTFR-2017-AVI-093

Solution

CNVD-2017-05636

FKIE_CVE-2017-4905

GHSA-VV24-23FC-H8GH

GSD-2017-4905

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour