CVE-2020-3965

MEDIUM

Vmware Cloud Foundation < 3.10 - Out-of-Bounds Read

Title source: rule

Description

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://www.vmware.com/security/advisories/VMSA-2020-0015.html

Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2020/Jul/22

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html

Scores

CVSS v3 5.5

EPSS 0.0006

EPSS Percentile 17.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-125

Status published

Products (2)

vmware/cloud_foundation 3.0 - 3.10

vmware/esxi 6.5 (49 CPE variants)

Published Jun 25, 2020

Tracked Since Feb 18, 2026