This workaround is applicable ONLY to ESXi.

There is a workaround provided for this vulnerability found in KB76372. Download links and release notes will be provided in the downloads section. Download links and release notes will be provided in the downloads section.įor VMware Cloud Foundation(ESXi) 4.x, apply patch 4.1.0.1 Download links and release notes will be provided in the downloads section.įor VMware Cloud FOundation(ESXi) 3.x, apply patch 3.10.1.2.

Download links and release notes will be provided in the downloads section.įor ESXi 6.5, apply patch ESXi650-202010401-SG. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.Ī malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.įor ESXi 7.0, apply patch ESXi_7.0.U1a-17119627 Download links and release notes will be provided in the downloads section.įor ESXi 6.7, apply patch ESXi670-202010401-SG. OpenSLP as used in ESXi has a use-after-free issue. ESXi OpenSLP remote code execution vulnerability (CVE-2020-3992) Updates are available to remediate these vulnerabilities in affected VMware products. Multiple vulnerabilities in VMware ESXi, Workstation, Fusion and NSX-T were privately reported to VMware.

VMware Workstation Pro / Player (Workstation).

Updated security advisory to add Workstation 15.x version in the response matrix of section CVE-2020-3981 and CVE-2020-3982. Today VMware released a new Security Announcement, VMSA-2020-0023.

Download vmware workstation pro 15.5.7