VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may lead to an information leak from host to guest.
CVE Status: Modified
Attribute | Value |
---|---|
Attack Complexity | LOW |
Attack Vector | LOCAL |
Availability Impact | NONE |
Base Score | 6.5 |
Base Severity | MEDIUM |
Confidentiality Impact | HIGH |
Integrity Impact | NONE |
Privileges Required | LOW |
Scope | CHANGED |
User Interaction | NONE |
Vector String | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Exploitability Score | 2 |
Impact Score | 4 |
Source | [email protected] |
Type | Primary |