Advisory Details

February 10th, 2015

VMware Workstation Authorization Service Denial-of-Service Vulnerability

CVE ID	CVE-2015-1044
CVSS SCORE	5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P
AFFECTED VENDORS	VMware, Inc.
AFFECTED PRODUCTS	VMware Workstation
VULNERABILITY DETAILS	This vulnerability allows remote attackers to cause a denial-of-service on vulnerable installations of VMWare Workstation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the VMWare Authorization service, which is listening on port 912. By sending a malformed packet, an attacker is able to cause the service to shut itself down. The service will not automatically restart, and once disabled virtual machines will not be able to get access to new resources.
ADDITIONAL DETAILS	VMware, Inc. has issued an update to correct this vulnerability. More details can be found at: http://www.vmware.com/security/advisories/VMSA-2015-0001.html
DISCLOSURE TIMELINE	2014-07-17 - Vulnerability reported to vendor 2015-02-10 - Coordinated public release of advisory
CREDIT	Dmitry Yudin @ret5et

BACK TO ADVISORIES