CVE-2018-6957

—

CVSS 3.0

5.3 medium

EPSS

2%p74

Published

Mar 15, 2018 (Mar 15, 2018)

Modified

Jun 17, 2026

Description

VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of VNC sessions. Note: In order for exploitation to be possible on Workstation and Fusion, VNC must be manually enabled.

Vendors: vmware
Products: workstation pro, workstation player, fusion
Weakness: CWE-772
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news2 stories

VMware addresses a DoS flaw in Workstation and Fusion products

Security AffairsMar 17, 18:50 UTC · Mar 17, 2018Exploit / PoC CVE-2018-6957

Vulnerability Spotlight: VMWare VNC Vulnerabilities

Cisco TalosDec 19, 19:00 UTC · Dec 19, 2017Vulnerability CVE-2018-6957 CVE-2017-4933 CVE-2017-4941