CVE-2018-6977 : VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerab

VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive, and in some cases, possibly result other VMs on the host or the host itself becoming unresponsive.

Published 2018-10-09 20:29:02

Updated 2019-10-03 00:03:26

Source VMware

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2018-6977

Vmware » Workstation
Versions from including (>=) 14.0.0 and up to, including, (<=) 14.1.5
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
Matching versions
Vmware » Workstation
Versions from including (>=) 15.0.0 and up to, including, (<=) 15.0.2
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
Matching versions
Vmware » Fusion
Versions from including (>=) 11.0.0 and up to, including, (<=) 11.0.2
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*
Matching versions
Vmware » Fusion
Versions from including (>=) 10.0.0 and up to, including, (<=) 10.1.5
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*
Matching versions
Vmware » Esxi » Version: 6.0
cpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*
Matching versions
Vmware » Esxi » Version: 6.5
cpe:2.3:o:vmware:esxi:6.5:*:*:*:*:*:*:*
Matching versions
Vmware » Esxi » Version: 6.7
cpe:2.3:o:vmware:esxi:6.7:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-6977

Top countries where our scanners detected CVE-2018-6977

Top open port discovered on systems with this issue 443

IPs affected by CVE-2018-6977 28,442

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-6977!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-6977

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-6977

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
6.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H	2.0	4.0	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-6977

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-6977

https://www.vmware.com/security/advisories/VMSA-2018-0025.html

VMSA-2018-0025
Mitigation;Vendor Advisory
http://www.securitytracker.com/id/1041822

VMware ESXi 3D-Acceleration Feature Lets Local Users on a Guest System Cause Denial of Service Conditions on the Host System - SecurityTracker
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1041821

VMware 3D-Acceleration Feature Lets Local Users on a Guest System Cause Denial of Service Conditions on the Host System - SecurityTracker
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/105549

Multiple VMware Products CVE-2018-6977 Denial of Service Vulnerability
Third Party Advisory;VDB Entry