✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Advisory – Red Hat update for libssh2

March 29, 2019
Rewterz

Rewterz Threat Advisory – CVE-2019-3813 – Amazon Linux update for spice

March 30, 2019

Rewterz Threat Advisory – VMware ESXi / Workstation Player Multiple Vulnerabilities

Severity

Medium

Analysis Summary

1) An error related to the virtual USB 1.1 UHCI (Universal Host Controller Interface) can be exploited to cause an out-of-bounds memory access.

2) A race condition error related to the virtual USB 1.1 UHCI (Universal Host Controller Interface) can be exploited to corrupt memory.

Successful exploitation of the vulnerabilities #1 and #2 may allow execution of code on the host but requires virtual machine with a virtual USB controller present.

Impact

Security Bypass

Affected Vendors

VMware

Affected Products

VMware Workstation Player 14.xVMware ESXi 6.x

Remediation

Apply patch or update to a fixed version.

VMware ESXi version 6.0:

Apply ESXi600-201903001.

VMware ESXi version 6.5:

Apply ESXi650-201903001.

VMware ESXi version 6.7:

Apply ESXi670-201903001.

VMware Workstation Player:

Update to version 14.1.7.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo