High severity7.0NVD Advisory· Published Jan 11, 2018· Updated Jun 17, 2026

CVE-2017-4949

Description

VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Fusion2 versions
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=8.0,<8.5.10
- (no CPE)range: 10.x before 10.1.1
VMware/Workstation2 versions
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=12.0,<12.5.9
- (no CPE)range: 14.x before 14.1.1

Patches

Vulnerability mechanics

References

www.vmware.com/security/advisories/VMSA-2018-0005.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/102489nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040161nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000