CVE-2018-6970 Information disclosure in VMware Horizon 6, Horizon 7, and Horizon Client

What is CVE-2018-6970?

CVE-2018-6970 is a medium-severity vulnerability in VMware Horizon 6, Horizon 7, and Horizon Client, published on 13 Aug 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn't apply to Horizon 6, 7 Agents installed on Linux systems or Horizon Clients installed on non-Windows systems.

Weakness: CWE-125

Which versions are affected by CVE-2018-6970?

It affects 2 products.

Products include Vmware Horizon Client, Vmware Horizon View.

How do I fix CVE-2018-6970?

No fix has been published for CVE-2018-6970 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-6970 being exploited?

There is no known exploitation of CVE-2018-6970 in the wild and no public exploit code.

Other vulnerabilities in VMware Horizon 6, Horizon 7, and Horizon Client

• CVE-2020-3961 Privilege escalation in VMware Horizon Client for Windows High 7.8
• CVE-2019-5543 Privilege escalation in VMware Horizon Client for Windows High 7.8
• CVE-2018-6964 Privilege escalation in Horizon Client for Linux High 7.8
• CVE-2020-3991 Path traversal in VMware Horizon Client for Windows High 7.1
• CVE-2021-21987 Information disclosure in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6j55-6hf8-fxvj.