CVE-2017-4904

CVE-2017-4904: falha em VMware ESXi

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ESXi+ Monitorar Workstation Pro / Player

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.4%
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 has uninitialized memory usage. This issue may allow a guest to execute code on the host. The issue is reduced to a Denial of Service of the guest on ESXi 5.5.
Produtos afetados
VMware · ESXiVMware · Fusion Pro / FusionVMware · Workstation Pro / Player
CVEs relacionadas — VMware ESXi

No mesmo produto, das mais perigosas para as menos.

CVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2017-4901—CVE-2017-4901EPSS 19.9%CVE-2017-4933—CVE-2017-4933EPSS 3.6%CVE-2025-41239HIGHvSockets information-disclosure vulnerabilityEPSS 3.2%CVE-2017-4941—CVE-2017-4941EPSS 3.2%CVE-2018-6972—CVE-2018-6972EPSS 3.0%