UpHeron
All vulnerabilities

Servers and applications

CVE-2017-4933

VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC…

Severity
High 8.8
Published
20 Dec 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
3.6% in the next 30 daysHigher than 89% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 6.5-650-201710001
  • Version 6.5-650-201707221
  • Version 6.5-650-201707220
  • Version 6.5-650-201707219
All 30 release lines
  • Version 6.5
  • Version 6.5-650-201701001
  • Version 6.5-650-201703001
  • Version 6.5-650-201703002
  • Version 6.5-650-201704001
  • Version 6.5-650-201707101
  • Version 6.5-650-201707102
  • Version 6.5-650-201707103
  • Version 6.5-650-201707201
  • Version 6.5-650-201707202
  • Version 6.5-650-201707203
  • Version 6.5-650-201707204
  • Version 6.5-650-201707205
  • Version 6.5-650-201707206
  • Version 6.5-650-201707207
  • Version 6.5-650-201707208
  • Version 6.5-650-201707209
  • Version 6.5-650-201707210
  • Version 6.5-650-201707211
  • Version 6.5-650-201707212
  • Version 6.5-650-201707213
  • Version 6.5-650-201707214
  • Version 6.5-650-201707215
  • Version 6.5-650-201707216
  • Version 6.5-650-201707217
  • Version 6.5-650-201707218
  • Version 6.5-650-201707219
  • Version 6.5-650-201707220
  • Version 6.5-650-201707221
  • Version 6.5-650-201710001

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-4933
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-4933