CVE-2014-8370 — Vulnetix

CVE-2014-8370 PUBLISHED CVSS 6.400000095367432 MEDIUM

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.

EPSS 1.17% · 79.0th percentile

Risk Scores

CVSS 2.0

6.400000095367432

EPSS Score

1.17%

79.0th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
vmware	player	6.0, 6.0.3, 6.0.2
vmware	fusion	6.0, 6.0.1, 6.0.2
vmware	esxi	5.1, 5.1, 5.5
vmware	workstation	10.0.4, 10.0.3, 10.0.2

Exploit Intelligence

Test code for poodle attack (CVE-2014-3566) (github-poc)
Test code for poodle attack (CVE-2014-3566) (github-poc)
Test code for poodle attack (CVE-2014-3566) (github-poc)
Test code for poodle attack (CVE-2014-3566) (github-poc)
uthrasri/openssl_g2.5_CVE-2014-3566 (github-poc)
uthrasri/openssl_g2.5_CVE-2014-3566 (github-poc)
uthrasri/openssl_g2.5_CVE-2014-3566 (github-poc)
uthrasri/openssl_g2.5_CVE-2014-3566 (github-poc)
:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle: (github-poc)
:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle: (github-poc)

…and 28 more exploits

Timeline

Jan 29, 2015 CVE Published
Jun 20, 2016 PoC Published
Jul 20, 2018 PoC Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
May 17, 2022 CVE Updated
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 3, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 7, 2023 EPSS Score

References

JVN#88252465 third-party-advisory
1031642 vdb
JVNDB-2015-000007 third-party-advisory
http://www.vmware.com/security/advisories/VMSA-2015-0001.html url
62605 third-party-advisory
72338 vdb
vmware-cve20148370-priv-esc(100933) vdb
62551 third-party-advisory
1031643 vdb
62669 third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-8370 advisory

Open in Interactive Console →