Critical VMware vulnerabilities disclosed, (Wed, Mar 29th)

VMware released a security bulletin[1] with moderate to critical vulnerabilities. The following products are affected:

• ESXi
• Workstation
• Fusion

The vulnerabilities may allow a guest to execute code on the host, may lead to a DDoS or information leakage (depending on the product and version). Patches are available.

[1]https://www.vmware.com/security/advisories/VMSA-2017-0006.html

Xavier Mertens (@xme)
ISC Handler - Freelance Security Consultant
PGP Key

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.