Lucene search

[email protected]CVE-2023-20869

HistoryApr 25, 2023 - 10:15 p.m.

CVE-2023-20869

2023-04-2522:15:09

CWE-787

[email protected]

web.nvd.nist.gov

115

vmware

workstation

fusion

17.x

13.x

stack-based

buffer-overflow

vulnerability

bluetooth

device sharing

cve-2023-20869

nvd

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.

Affected configurations

NVD

Node

vmwarefusionRange13.0.0–13.0.2

vmwareworkstationRange17.0.0–17.0.2

CPENameOperatorVersion
vmware:fusionvmware fusionlt13.0.2
vmware:workstationvmware workstationlt17.0.2

CPE	Name	Operator	Version
vmware:fusion	vmware fusion	lt	13.0.2
vmware:workstation	vmware workstation	lt	17.0.2

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Workstation Pro / Player (Workstation) and VMware Fusion",
    "versions": [
      {
        "version": "VMware Workstation (17.x) and VMware Fusion (13.x)",
        "status": "affected"
      }
    ]
  }
]