VMSA-2019-0019 : Denial-of-service vulnerability

medium Nessus Plugin ID 130346

Language:

Synopsis

The remote VMware ESXi host is missing one or more security-related patches.

Description

ESXi shader denial-of-service vulnerability - CVE-2019-5536

VMware ESXi, Workstation and Fusion contain a denial-of-service vulnerability in the shader functionality.

Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM.

A local attacker with non-administrative access on the guest machine may exploit this issue to execute code on the host. This issue can only be exploited if a valid sound back-end is not connected.

Solution

Apply the missing patches.

Plugin Details

Severity: Medium

ID: 130346

File Name: vmware_VMSA-2019-0019.nasl

Version: 1.4

Type: local

Family: VMware ESX Local Security Checks

Published: 10/28/2019

Updated: 4/16/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 3.5

Temporal Score: 2.6

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:N/A:P

CVSS Score Source: CVE-2019-5536

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:vmware:esxi:6.5, cpe:/o:vmware:esxi:6.7

Required KB Items: Host/local_checks_enabled, Host/VMware/release, Host/VMware/version

Exploit Ease: No known exploits are available

Patch Publication Date: 10/24/2019

Vulnerability Publication Date: 10/28/2019

Reference Information

CVE: CVE-2019-5536

VMSA: 2019-0019

Detections

Analytics