Cyber Risks · Cisco Talos

Vulnerability Spotlight: Denial-of-service in VMWare Fusion 11

Summary: Piotr Bania of Cisco Talos discovered an exploitable denial-of-service vulnerability in VMware Fusion 11.1.0 (13668589) that a specially crafted pixel shader can trigger. The flaw can be triggered from a VMware guest and crashes the VMware Fusion process on the host, and Talos published Snort rules 50502 and 50503 for it.

Why it matters: The trigger sits inside the guest, but the crash lands on the host - so a compromised or untrusted VM can take down the machine your other work depends on, not just itself.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related