$ cve CVE-2017-4905 JSON

CVE-2017-4905 EXPLOIT

5.5

MEDIUM · CVSS 3.1 · EPSS 1.2% (pctl 67)

Patch early

A public exploit exists.

Description

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

Scoring

CVSS	5.5 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS	1.2% — more likely to be exploited than 67% of all CVEs
Weakness	CWE-908
On CISA KEV	no
Public exploit	yes
Published	2017-06-07
Last modified	2026-06-17

Affected (6)

Vendor	Product
apple	mac os x
vmware	esxi
vmware	fusion
vmware	fusion pro
vmware	workstation player
vmware	workstation pro

Public exploits

Source	Title	Date
exploit-db	VMware WorkStation 12.5.3 - Virtual Machine Escape	2019-06-06

References

→ the Explorer · watch your stack · NVD