CVE-2020-3967 VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x be

What is CVE-2020-3967?

CVE-2020-3967 is a high-severity vulnerability in Vmware Cloud Foundation, published on 25 Jun 2020.

Official description

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a heap-overflow vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.

Weakness: CWE-787

Which versions are affected by CVE-2020-3967?

It affects 4 products.

Products include Vmware Cloud Foundation, Vmware Esxi, Vmware Fusion, Vmware Workstation.

How do I fix CVE-2020-3967?

No fix has been published for CVE-2020-3967 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-3967 being exploited?

There is no known exploitation of CVE-2020-3967 in the wild and no public exploit code.

Other vulnerabilities in Vmware Cloud Foundation

• CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Exploited Critical 9.8
• CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Exploited Critical 9.8
• CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Exploited Critical 9.8
• CVE-2021-22005 VMware vCenter Server File Upload Exploited Critical 9.8
• CVE-2021-21985 VMware vCenter Server Improper Input Validation Exploited Critical 9.8

All Vmware Cloud Foundation vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-49f5-2882-wx3j.