VMware Releases Security Update for ESXi, Workstation, Fusion, and Cloud Foundation
Security update addresses a heap-overflow vulnerability in VMware products
Summary
Security update addresses a heap-overflow vulnerability in VMware products
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
VMware has released an important advisory that includes updates and workarounds to remediate against a heap-overflow vulnerability in VMware products. An attacker with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine and take control of an affected system.
Remediation advice
Affected organisations are encouraged to review VMware Security Advisory VMSA-2022-0001 and apply any relevant updates or workarounds.
Definitive source of threat updates
Last edited: 6 January 2022 1:48 pm