CVE-2019-5542

Severity
7.7HIGH
EPSS
0.3%
top 46.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 20
Latest updateMay 24

Description

VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 3.1 | Impact: 4.0

Affected Packages3 packages

CVEListV5vmware/workstation_and_fusionWorkstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1)
NVDvmware/fusion11.0.011.5.1
NVDvmware/workstation15.0.015.5.1

Patches

🔴Vulnerability Details

2
GHSA
GHSA-qf8x-4p92-75q9: VMware Workstation (152022-05-24
CVEList
CVE-2019-5542: VMware Workstation (152019-11-20

📋Vendor Advisories

1
VMware
VMware Workstation and Fusion updates address multiple security vulnerabilities (CVE-2019-5540, CVE-2019-5541, CVE-2019-5542)2019-11-12