Allele Security Intelligence

ASA-2019-00563 – VMware Workstation and VMware Fusion: Denial-of-service vulnerability due to improper handling of certain IPv6 packets

Posted on October 14, 2019October 23, 2019 by Allele Security Intelligence in Alerts

VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. An attacker may exploit this issue by sending a specially crafted IPv6 packet from a guest machine on the VMware NAT to disallow network access for all guest machines using VMware NAT mode. This issue can be exploited only if IPv6 mode for VMNAT is enabled.

ASA-2019-00562 – VMware ESXi, Workstation, Fusion, Remote Console and Horizon Client: Use-after-free vulnerability in the virtual sound device

Posted on October 14, 2019October 21, 2019 by Allele Security Intelligence in Alerts

ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. A local attacker with non-administrative access on the guest machine may exploit this issue to execute code on the host.