VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Advisories
Source ID Title
EUVD EUVD EUVD-2021-9210 VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: vmware

Published:

Updated: 2024-08-03T18:30:23.952Z

Reserved: 2021-01-04T00:00:00

Link: CVE-2021-22041

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-02-16T17:15:10.477

Modified: 2024-11-21T05:49:29.167

Link: CVE-2021-22041

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.