VMware Fusion 11.0.x < 11.5.1 Multiple Vulnerabilities (VMSA-2019-0020, VMSA-2019-0021)
Medium Nessus Plugin ID 131128
SynopsisA virtualization application installed on the remote macOS or Mac OS X host is affected by multiple vulnerabilities
DescriptionThe version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.1. It is, therefore, affected by multiple vulnerabilities:
- An unspecified information disclosure vulnerability in vmnetdhcp. (CVE-2019-5540)
- An unspecified out-of-bounds write vulnerability in the e1000e virtual network adapter. (CVE-2019-5541)
- An unspecified denial-of-service vulnerability in the RPC handler. (CVE-2019-5542)
- Unspecified vulnerabilities related to hypervisor-specific mitigations for TSX Asynchronous Abort (TAA).
SolutionUpdate to VMware Fusion version 11.5.1 or later.