CVE-2019-5518 : Security Advisory and Response

A vulnerability has been identified in VMware ESXi, Workstation, and Fusion, allowing for potential code execution on the host system.

Understanding CVE-2019-5518

This CVE involves an out-of-bounds read/write scenario in the virtual USB 1.1 UHCI.

What is CVE-2019-5518?

The vulnerability in VMware ESXi, Workstation, and Fusion versions allows an attacker with access to a virtual machine to execute code on the host.

The Impact of CVE-2019-5518

Exploitation of this vulnerability could lead to unauthorized code execution on the host system.

Technical Details of CVE-2019-5518

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability involves an out-of-bounds read/write scenario in the virtual USB 1.1 UHCI.

Affected Systems and Versions

VMware ESXi 6.7 before ESXi670-201903001
VMware ESXi 6.5 before ESXi650-201903001
VMware ESXi 6.0 before ESXi600-201903001
Workstation 15.x before 15.0.4
Workstation 14.x before 14.1.7
Fusion 11.x before 11.0.3
Fusion 10.x before 10.1.6

Exploitation Mechanism

To exploit this vulnerability, an attacker needs access to a virtual machine with a virtual USB controller.

Mitigation and Prevention

Steps to address and prevent the CVE-2019-5518 vulnerability.

Immediate Steps to Take

Apply the necessary security patches provided by VMware.
Restrict access to virtual machines with virtual USB controllers.
Monitor for any unauthorized code execution.

Long-Term Security Practices

Regularly update VMware products to the latest versions.
Implement network segmentation to isolate critical systems.

Patching and Updates

Ensure timely installation of security patches and updates released by VMware.