VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 25, 2020· Updated Aug 4, 2024

CVE-2020-3971

CVE-2020-3971

Description

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • VMware/Esxillm-fuzzy
    Range: 6.7 before ESXi670-201904101-SG, 6.5 before ESXi650-201907101-SG
  • VMware/Fusionllm-fuzzy2 versions
    <11.0.2+ 1 more
    • (no CPE)range: <11.0.2
    • (no CPE)range: 11.x before 11.0.2
  • VMware/Workstationllm-fuzzy2 versions
    <15.0.2+ 1 more
    • (no CPE)range: <15.0.2
    • (no CPE)range: 15.x before 15.0.2
  • VMware/VMware ESXiv5
    Range: 6.7 before ESXi670-201904101-SG

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.