CVE-2020-3982 Memory corruption in VMware ESXi, Workstation, Fusion

High 7.7 Published 20 Oct 2020 Updated 4 Aug 2024

A malicious VM administrator can exploit an ACPI race condition to corrupt hypervisor memory or crash the VM process.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-3982?

CVE-2020-3982 is a high-severity memory corruption vulnerability in Vmware Cloud Foundation, published on 20 Oct 2020. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds write vulnerability due to a time-of-check time-of-use issue in ACPI device. A malicious actor with administrative access to a virtual machine may be able to exploit this vulnerability to crash the virtual machine's vmx process or corrupt hypervisor's memory heap.

Weakness: CWE-787, CWE-367

Which versions are affected by CVE-2020-3982?

It affects 5 products.

Products include Vmware Cloud Foundation, Vmware Esxi, Vmware Fusion, Vmware Workstation, Vmware Workstation Player.

How do I fix CVE-2020-3982?

No fix has been published for CVE-2020-3982 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-3982 being exploited?

There is no known exploitation of CVE-2020-3982 in the wild and no public exploit code.

All Vmware Cloud Foundation vulnerabilities

Sources

Also known as GHSA-v5g8-mmh3-rp62.