Unrated severityNVD Advisory· Published Jun 25, 2020· Updated Aug 4, 2024

CVE-2020-3963

Description

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Esxillm-fuzzy
Range: 7.0 < ESXi_7.0.0-1.20.16321839, 6.7 < ESXi670-202006401-SG, 6.5 < ESXi650-202005401-SG
VMware/Fusionllm-fuzzy2 versions
<11.5.2+ 1 more
- (no CPE)range: <11.5.2
- (no CPE)range: 11.x before 11.5.2
VMware/Workstationllm-fuzzy2 versions
<15.5.2+ 1 more
- (no CPE)range: <15.5.2
- (no CPE)range: 15.x before 15.5.2
VMware/VMware ESXiv5
Range: 7.0 before ESXi_7.0.0-1.20.16321839

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.htmlmitrex_refsource_MISC
seclists.org/fulldisclosure/2020/Jul/22mitremailing-listx_refsource_FULLDISC
www.vmware.com/security/advisories/VMSA-2020-0015.htmlmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000