VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.
Advisories
Source ID Title
EUVD EUVD EUVD-2020-25228 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: vmware

Published:

Updated: 2024-08-04T07:52:20.479Z

Reserved: 2019-12-30T00:00:00

Link: CVE-2020-3963

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-06-25T15:15:11.053

Modified: 2024-11-21T05:32:04.127

Link: CVE-2020-3963

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.