vulnerability

VMware Fusion: Vulnerability (VMSA-2018-0005) (CVE-2017-4950)

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jan 12, 2018
Added
Jan 12, 2018
Modified
Aug 11, 2025

Description

VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead to an out-of-bound read which can then be used to execute code on the host in conjunction with other issues. Note: IPv6 mode for VMNAT is not enabled by default.

Solutions

vmware-fusion-upgrade-10_1_1vmware-fusion-upgrade-8_5_10
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.