Support Content Notification - Support Portal

VMSA-2020-0029:VMware ESXi, Workstation, Fusion and Cloud Foundation updates address a denial of service vulnerability

Product/Component

VMware Cloud Foundation

2 more products

Notification Id

23597

Last Updated

07 February 2021

Initial Publication Date

15 December 2020

Status

CLOSED

Severity

LOW

CVSS Base Score

3.3

WorkAround

Affected CVE

CVE-2020-3999

Advisory ID: VMSA-2020-0029.1

CVSSv3 Range: 3.3

Issue Date:2020-12-17

Updated On: 2021-02-09

CVE(s): CVE-2020-3999

Synopsis: VMware ESXi, Workstation, Fusion and Cloud Foundation updates address a denial of service vulnerability (CVE-2020-3999)

1. Impacted Products

VMware ESXi
VMware Workstation
VMware Fusion
VMware Cloud Foundation (Cloud Foundation)

2. Introduction

A denial of service vulnerability in VMware ESXi, Workstation and Fusion was privately reported to VMware. Updates are available to address this vulnerability in affected VMware products.

3a. Denial-of-Service Vulnerability due to improper input validation (CVE-2020-3999)

Description

VMware ESXi, Workstation and Fusion contain a denial of service vulnerability due to improper input validation in GuestInfo. VMware has evaluated the severity of this issue to be in the Low severity range with a maximum CVSSv3 base score of 3.3.

Known Attack Vectors

A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx process leading to a denial of service condition.

Resolution

To remediate CVE-2020-3999 apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.

Workarounds

None.

Additional Documentation

None.

Notes

None.

Acknowledgements

VMware would like to thank Lucas Leong (@_wmliang_) of Trend Micro Zero Day Initiative and Murray McAllister of Insomnia Security - A CyberCX Company for reporting this issue to us.

Response Matrix 3a:

Product	Version	Running On	CVE Identifier	CVSSv3	Severity	Fixed Version	Workarounds	Additional Documentation
ESXi	7.0	Any	CVE-2020-3999	3.3	low	ESXi70U1c-17325551	None	None
ESXi	6.7	Any	CVE-2020-3999	N/A	N/A	Unaffected	N/A	N/A
ESXi	6.5	Any	CVE-2020-3999	N/A	N/A	Unaffected	N/A	N/A
Workstation	16.x	Any	CVE-2020-3999	3.3	low	16.0	None	None
Workstation	15.x	Any	CVE-2020-3999	3.3	low	15.5.7	None	None
Fusion	12.x	OS X	CVE-2020-3999	3.3	low	12.0	None	None
Fusion	11.x	OS X	CVE-2020-3999	3.3	low	11.5.7	None	None

Impacted Product Suites that Deploy Response Matrix 3a Components:

Product	Version	Running On	CVE Identifier	CVSSv3	Severity	Fixed Version	Workarounds	Additional Documentation
Cloud Foundation (ESXi)	4.x	Any	CVE-2020-3999	3.3	low	4.2	None	None
Cloud Foundation (ESXi)	3.x	Any	CVE-2020-3999	N/A	N/A	Unaffected	N/A	N/A