CVE-2018-6981 PoC — Vmware ESXi、Workstation和Fusion 缓冲区错误漏洞

Source

Associated Vulnerability

Title:Vmware ESXi、Workstation和Fusion 缓冲区错误漏洞 (CVE-2018-6981)
Description:VMware ESXi、Workstation和Fusion都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台；VMware Workstation是一套虚拟机软件；Fusion是一套专用于在苹果机（Mac）上运行Windows应用程序的的虚拟机软件。 Vmware ESXi、Workstation和Fusion中存在安全漏洞，该漏洞源于vmxnet3虚拟网络调机器使用了未初始化的栈内存。攻击者可通过发送来提交恶意的输入利用该漏洞在主机系统上执行

Description

Use this tool to prioritize cluster patching for the recent VMware advisory VMSA-2018-0027 related to CVE-2018-6981 and CVE-2018-6982.

Readme

Summary:  
vmxnet3Hunter will find all virtual machines running the vmxnet3 adapter and flag the parent cluster as vulenrable to the recent vmEscape advisory.  

VMware Advisory: https://www.vmware.com/security/advisories/VMSA-2018-0027.html  
CVE: CVE-2018-6981, CVE-2018-6982

File Snapshot


 [4.0K]  /data/pocs/3d9ba507e12d44241dfa310b895a131e858f3cce
├── [ 283]  README.md
└── [6.4K]  vmxnet3Hunter.py

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!