CVE-2018-6969 Information disclosure in VMware Tools

High 7.0 Published 13 Jul 2018 Updated 17 Sep 2024

Out-of-bounds read in VMware Tools HGFS allows attackers to disclose information or escalate privileges on guest VMs when file sharing is enabled.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-6969?

CVE-2018-6969 is a high-severity vulnerability in VMware Tools, published on 13 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.

Weakness: CWE-125

Which versions are affected by CVE-2018-6969?

It affects 1 product.

Products include Vmware Tools.

How do I fix CVE-2018-6969?

No fix has been published for CVE-2018-6969 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-6969 being exploited?

There is no known exploitation of CVE-2018-6969 in the wild and no public exploit code.

Sources

Also known as GHSA-qc3q-9h28-r994.