CVE-2025-41227 | THREATINT

Description

VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating system may be able to exploit this issue by exhausting memory of the host process leading to a denial-of-service condition.

PUBLISHED Reserved 2025-04-16 | Published 2025-05-20 | Updated 2025-06-24 | Assigner vmware

MEDIUM: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-400 Uncontrolled Resource Consumption

Product status

Default status

unaffected

8.0 (custom) before ESXi80U3se-24659227

affected

7.0 (custom) before ESXi70U3sv-24723868

affected

Default status

unaffected

5.x, 4.5.x

affected

Default status

unaffected

5.x, 4.x, 3.x, 2.x

affected

Default status

unaffected

3.x, 2.x

affected

Default status

unaffected

17.x (custom) before 17.6.3

affected

Default status

unaffected

13.x (custom) before 13.6.3

affected

References

support.broadcom.com/...l/content/SecurityAdvisories/0/25717

cve.org (CVE-2025-41227)

nvd.nist.gov (CVE-2025-41227)

Download JSON