Medium severity6.5NVD Advisory· Published Oct 9, 2018· Updated Jun 17, 2026

CVE-2018-6977

Description

VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive, and in some cases, possibly result other VMs on the host or the host itself becoming unresponsive.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Esxillm-fuzzy2 versions
6.0, 6.5, 6.7+ 1 more
- (no CPE)range: 6.0, 6.5, 6.7
- (no CPE)range: 6.7, 6.5, 6.0
VMware/Fusionllm-fuzzy2 versions
10.x, 11.x+ 1 more
- (no CPE)range: 10.x, 11.x
- (no CPE)range: 11.x and 10.x
VMware/Workstationllm-fuzzy2 versions
14.x, 15.x+ 1 more
- (no CPE)range: 14.x, 15.x
- (no CPE)range: 15.x and 14.x

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105549nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041821nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041822nvdThird Party AdvisoryVDB Entry
www.vmware.com/security/advisories/VMSA-2018-0025.htmlnvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000