Vulnerability-Lookup

FKIE_CVE-2015-2341

Vulnerability from fkie_nvd - Published: 2015-06-13 14:59 - Updated: 2025-04-12 10:46

Severity ?

Summary

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command.

References

URL	Tags
cve@mitre.org	http://www.securityfocus.com/bid/75094
cve@mitre.org	http://www.securitytracker.com/id/1032530
cve@mitre.org	http://www.vmware.com/security/advisories/VMSA-2015-0004.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/75094
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1032530
af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/security/advisories/VMSA-2015-0004.html	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
vmware	fusion	6.0
vmware	fusion	6.0.1
vmware	fusion	6.0.2
vmware	fusion	6.0.3
vmware	fusion	6.0.4
vmware	fusion	6.0.5
vmware	fusion	7.0
vmware	fusion	7.0.1
vmware	fusion	7.1.0
vmware	fusion	7.1.1
vmware	player	6.0
vmware	player	6.0.1
vmware	player	6.0.2
vmware	player	6.0.3
vmware	player	6.0.4
vmware	player	6.0.5
vmware	workstation	10.0
vmware	workstation	10.0.1
vmware	workstation	10.0.2
vmware	workstation	10.0.3
vmware	workstation	10.0.4

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4BF84FD-2666-48F4-AEA6-4F2B30AF95BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "184E7883-BBAD-4687-881A-69F0A5341ACA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2CFDBFB-3776-4615-AF3B-FCBD6840A95F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA730B34-3F72-451D-9960-DF44821A001C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "67198AB1-95B1-4ECC-A4CE-E2EAE688E193",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "85A09E65-9C4C-42FD-A1B0-E925A905875A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "92275180-52FC-48DE-947C-3AE1B87AF2C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:7.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7EF002E-10E1-4405-8C55-BD91AD45B891",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:7.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "665657BA-143E-4873-9FFC-B984445D7266",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:7.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C9E4C16-838C-4302-A4E7-A79878070519",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BBDD49B-0083-4743-B4F8-6214FE8F4822",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEBFD3AF-D8A3-4599-AF42-B47C0A62AA39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "82AE914B-8688-4274-9D40-C3A166F112AE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "043541FC-C4F9-4E71-8373-E9022DCC62DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "200179EA-B682-435D-948C-5B70B686D1AE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D5D0FC7-8389-4B1D-BDBD-3017E5740F77",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D0119B9-916C-4A98-8542-10FFC4F71C80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "35CA413B-AB24-4884-A052-2A30A0CA4E7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4B2275C-913F-43D9-8146-0B0CD737E485",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "01512B1C-ABCF-4705-91E8-F51FE6397343",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A74B9F8A-E336-4421-ADA8-D2640DD7E67E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command."
    },
    {
      "lang": "es",
      "value": "VMware Workstation 10.x anterior a 10.0.5, VMware Player 6.x anterior a 6.0.6, y VMware Fusion 6.x anterior a 6.0.6 y 7.x anterior a 7.0.1 permiten a atacantes causar una denegaci\u00f3n de servicio sobre un sistema operativo invitado de 32 bits o sobre un sistema operativo anfitri\u00f3n de 64 bits a trav\u00e9s de un comando RPC manipulado."
    }
  ],
  "id": "CVE-2015-2341",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-06-13T14:59:04.637",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/75094"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1032530"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2015-0004.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/75094"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1032530"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2015-0004.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2015-2341 (GCVE-0-2015-2341)

Vulnerability from cvelistv5 – Published: 2015-06-13 14:00 – Updated: 2024-08-06 05:10

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/75094	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id/1032530	vdb-entryx_refsource_SECTRACK

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:10:16.174Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2015-0004.html"
          },
          {
            "name": "75094",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75094"
          },
          {
            "name": "1032530",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032530"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-06-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2015-0004.html"
        },
        {
          "name": "75094",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75094"
        },
        {
          "name": "1032530",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032530"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2341",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2015-0004.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2015-0004.html"
            },
            {
              "name": "75094",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75094"
            },
            {
              "name": "1032530",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032530"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2341",
    "datePublished": "2015-06-13T14:00:00",
    "dateReserved": "2015-03-18T00:00:00",
    "dateUpdated": "2024-08-06T05:10:16.174Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2015-2341

CVE-2015-2341 (GCVE-0-2015-2341)

Tags

Sightings

Nomenclature