CVE-2018-6981
HIGH
8.8
CVSS Score
Published: December 4, 2018 at 02:00 PM UTC
Updated: June 17, 2026 at 02:02 AM UTC
3 products affected across 1 vendorWorkstationESXiFusion· also runs on 1 platform
Using VMware ESXi, VMware Workstation, and VMware Fusion by VMware?
Get instant alerts when new vulnerabilities affect VMware ESXi, VMware Workstation, and VMware Fusion - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 1%
Description
VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below contain uninitialized stack memory usage in the vmxnet3 virtual network adapter which may allow a guest to execute code on the host.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
6.06.0 16.0 1a6.0 1b6.0 26.0 36.0 3a6.0 600-2015044016.0 600-2015054016.0 600-2015071016.0 600-2015071026.0 600-2015074016.0 600-2015074026.0 600-2015074036.0 600-2015074046.0 600-2015074056.0 600-2015074066.0 600-2015074076.0 600-2015091016.0 600-2015091026.0 600-2015092016.0 600-2015092026.0 600-2015092036.0 600-2015092046.0 600-2015092056.0 600-2015092066.0 600-2015092076.0 600-2015092086.0 600-2015092096.0 600-2015092106.0 600-2015104016.0 600-2015114016.0 600-2016011016.0 600-2016011026.0 600-2016014016.0 600-2016014026.0 600-2016014036.0 600-2016014046.0 600-2016014056.0 600-2016024016.0 600-2016031016.0 600-2016031026.0 600-2016032016.0 600-2016032026.0 600-2016032036.0 600-2016032046.0 600-2016032056.0 600-2016032066.0 600-2016032076.0 600-2016032086.0 600-2016054016.0 600-2016081016.0 600-2016084016.0 600-2016084026.0 600-2016084036.0 600-2016084046.0 600-2016084056.0 600-2016104106.0 600-2016114016.0 600-2016114026.0 600-2016114036.0 600-2017021016.0 600-2017021026.0 600-2017022016.0 600-2017022026.0 600-2017022036.0 600-2017022046.0 600-2017022056.0 600-2017022066.0 600-2017022076.0 600-2017022086.0 600-2017022096.0 600-2017022106.0 600-2017022116.0 600-2017022126.0 600-2017034016.0 600-2017061016.0 600-2017061026.0 600-2017061036.0 600-2017064016.0 600-2017064026.0 600-2017064036.0 600-2017103016.0 600-2018110016.56.5 650-2017010016.5 650-2017030016.5 650-2017030026.5 650-2017040016.5 650-2017071016.5 650-2017071026.5 650-2017071036.5 650-2017072016.5 650-2017072026.5 650-2017072036.5 650-2017072046.5 650-2017072056.5 650-2017072066.5 650-2017072076.5 650-2017072086.5 650-2017072096.5 650-2017072106.5 650-2017072116.5 650-2017072126.5 650-2017072136.5 650-2017072146.5 650-2017072156.5 650-2017072166.5 650-2017072176.5 650-2017072186.5 650-2017072196.5 650-2017072206.5 650-2017072216.5 650-2017100016.5 650-2017120016.5 650-2018030016.5 650-2018060016.5 650-2018080016.5 650-2018100016.5 650-2018100026.5 650-2018110016.5 650-2018110026.76.7 670-2018060016.7 670-2018070016.7 670-2018080016.7 670-2018100016.7 670-2018101016.7 670-2018101026.7 670-2018101036.7 670-2018102016.7 670-2018102026.7 670-2018102036.7 670-2018102046.7 670-2018102056.7 670-2018102066.7 670-2018102076.7 670-2018102086.7 670-2018102096.7 670-2018102106.7 670-2018102116.7 670-2018102126.7 670-2018102136.7 670-2018102146.7 670-2018102156.7 670-2018102166.7 670-2018102176.7 670-2018102186.7 670-2018102196.7 670-2018102206.7 670-2018102216.7 670-2018102226.7 670-2018102236.7 670-2018102246.7 670-2018102256.7 670-2018102266.7 670-2018102276.7 670-2018102286.7 670-2018102296.7 670-2018102306.7 670-2018102316.7 670-2018102326.7 670-2018102336.7 670-2018102346.7 670-201811001VMware ESXi 6.7 without ESXi670-201811401-BG, VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below
10.0.0 ≤ v < 10.1.411.0.0VMware ESXi 6.7 without ESXi670-201811401-BG, VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below
Affected range stops below 10.1.4, so it looks safe — our inference, not a vendor statement
apple-macos (environment)
14.0.0 ≤ v < 14.1.415.0.0VMware ESXi 6.7 without ESXi670-201811401-BG, VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware Workstation 15, VMware Workstation 14.1.3 or below, VMware Fusion 11, VMware Fusion 10.1.3 or below
Affected range stops below 14.1.4, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/105881VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1042054VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1042055x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://www.vmware.com/security/advisories/VMSA-2018-0027.htmlCVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- CHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-908
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card