CVE-2017-4933

CVE-2017-4933: falha em VMware ESXi

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Workstation+ Monitorar Fusion

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.6%
VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall.
Produtos afetados
VMware · ESXiVMware · FusionVMware · Workstation
CVEs relacionadas — VMware ESXi

No mesmo produto, das mais perigosas para as menos.

CVE-2025-22224CRITICALCVE-2025-22224EPSS 1.6%KEVCVE-2025-41239HIGHvSockets information-disclosure vulnerabilityEPSS 3.2%CVE-2017-4941—CVE-2017-4941EPSS 3.2%CVE-2018-6972—CVE-2018-6972EPSS 3.0%CVE-2025-41236CRITICALVMXNET3 integer-overflow vulnerabilityEPSS 2.6%CVE-2019-5528—CVE-2019-5528EPSS 1.7%