CVE-2017-4950

7.0 highEPSS 0.4%

High (7.0) in vmware. EPSS 0.4% chance of exploitation in the next 30 days.

VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead to an out-of-bound read which can then be used to execute code on the host in conjunction with other issues. Note: IPv6 mode for VMNAT is not enabled by default.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2018-01-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:fusion
vmware:workstation

References

http://www.securityfocus.com/bid/102490
http://www.securitytracker.com/id/1040161
https://www.vmware.com/security/advisories/VMSA-2018-0005.html
http://www.securityfocus.com/bid/102490
http://www.securitytracker.com/id/1040161

Check your stack JSON