CVE-2018-6965 Details
Description
VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to crash their VMs, a different vulnerability than CVE-2018-6966 and CVE-2018-6967.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.vmware.com/security/advisories/VMSA-2018-0016.html | CVE | Vendor Advisory |
| http://www.securityfocus.com/bid/104709 | CVE | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1041208 | CVE | Third Party AdvisoryVDB Entry |
| https://www.vmware.com/security/advisories/VMSA-2018-0016.html | [email protected] | Vendor Advisory |
| http://www.securityfocus.com/bid/104709 | [email protected] | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1041208 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vmware workstation | >= 14.0, < 14.1.2 |
CPE
Remediation
| |
| vmware esxi | 6.7 - 6.7 670-201806001 |
CPE
Remediation
| |
| vmware fusion | >= 10.0, < 10.1.2 |
CPE
Remediation
| |
| apple mac os x | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 3, 2022 | Reanalysis | [email protected] |
| Sep 5, 2018 | Initial Analysis | [email protected] |
| Jul 13, 2018 | CVE Modified | [email protected] |
| Jul 11, 2018 | CVE Modified | [email protected] |