CVE-2014-8370 Privilege escalation in n/a
Local users can escalate privileges or cause denial of service by modifying configuration files in VMware virtualization products.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-8370?
CVE-2014-8370 is a medium-severity vulnerability in Vmware Esxi, published on 29 Jan 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.
Weakness: CWE-264
Which versions are affected by CVE-2014-8370?
It affects 4 products.
Products include Vmware Esxi, Vmware Fusion, Vmware Player, Vmware Workstation.
How do I fix CVE-2014-8370?
No fix has been published for CVE-2014-8370 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-8370 being exploited?
There is no known exploitation of CVE-2014-8370 in the wild and no public exploit code.
Other vulnerabilities in Vmware Esxi
Sources
Also known as GHSA-3g8q-4222-255f.