VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 21, 2020· Updated Jun 17, 2026

CVE-2020-3999

CVE-2020-3999

Description

VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx process leading to a denial of service condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • VMware/Esxillm-fuzzy6 versions
    < ESXi70U1c-17325551+ 5 more
    • (no CPE)range: < ESXi70U1c-17325551
    • cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
  • VMware/Workstationllm-fuzzy2 versions
    < 16.0 and < 15.5.7+ 1 more
    • (no CPE)range: < 16.0 and < 15.5.7
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=15.0.0,<15.5.7
  • VMware/Fusionllm-fuzzy2 versions
    < 12.0 and < 11.5.7+ 1 more
    • (no CPE)range: < 12.0 and < 11.5.7
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=11.5.0,<11.5.7
  • VMware/Cloud Foundationllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.