Servers and applications
CVE-2020-3971 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.
Severity Medium 5.5
Published 25 Jun 2020
Last changed 17 Jun 2026
Added to UpHeron 1 Nov 2026
Sources NVD Affected software Software Affected versions VMware ESXiServers and applications · cpe:o:vmware:esxi Version 6.7-670-201904001 Version 6.7-670-201903001 Version 6.7-670-201901403 Version 6.7-670-201901402 All 91 release lines Version 6.5 Version 6.5-650-201701001 Version 6.5-650-201703001 Version 6.5-650-201703002 Version 6.5-650-201704001 Version 6.5-650-201707101 Version 6.5-650-201707102 Version 6.5-650-201707103 Version 6.5-650-201707201 Version 6.5-650-201707202 Version 6.5-650-201707203 Version 6.5-650-201707204 Version 6.5-650-201707205 Version 6.5-650-201707206 Version 6.5-650-201707207 Version 6.5-650-201707208 Version 6.5-650-201707209 Version 6.5-650-201707210 Version 6.5-650-201707211 Version 6.5-650-201707212 Version 6.5-650-201707213 Version 6.5-650-201707214 Version 6.5-650-201707215 Version 6.5-650-201707216 Version 6.5-650-201707217 Version 6.5-650-201707218 Version 6.5-650-201707219 Version 6.5-650-201707220 Version 6.5-650-201707221 Version 6.5-650-201710001 Version 6.5-650-201712001 Version 6.5-650-201803001 Version 6.5-650-201806001 Version 6.5-650-201808001 Version 6.5-650-201810001 Version 6.5-650-201810002 Version 6.5-650-201811001 Version 6.5-650-201811002 Version 6.5-650-201811301 Version 6.5-650-201901001 Version 6.5-650-201903001 Version 6.5-650-201905001 Version 6.7 Version 6.7-670-201806001 Version 6.7-670-201807001 Version 6.7-670-201808001 Version 6.7-670-201810001 Version 6.7-670-201810101 Version 6.7-670-201810102 Version 6.7-670-201810103 Version 6.7-670-201810201 Version 6.7-670-201810202 Version 6.7-670-201810203 Version 6.7-670-201810204 Version 6.7-670-201810205 Version 6.7-670-201810206 Version 6.7-670-201810207 Version 6.7-670-201810208 Version 6.7-670-201810209 Version 6.7-670-201810210 Version 6.7-670-201810211 Version 6.7-670-201810212 Version 6.7-670-201810213 Version 6.7-670-201810214 Version 6.7-670-201810215 Version 6.7-670-201810216 Version 6.7-670-201810217 Version 6.7-670-201810218 Version 6.7-670-201810219 Version 6.7-670-201810220 Version 6.7-670-201810221 Version 6.7-670-201810222 Version 6.7-670-201810223 Version 6.7-670-201810224 Version 6.7-670-201810225 Version 6.7-670-201810226 Version 6.7-670-201810227 Version 6.7-670-201810228 Version 6.7-670-201810229 Version 6.7-670-201810230 Version 6.7-670-201810231 Version 6.7-670-201810232 Version 6.7-670-201810233 Version 6.7-670-201810234 Version 6.7-670-201811001 Version 6.7-670-201901001 Version 6.7-670-201901401 Version 6.7-670-201901402 Version 6.7-670-201901403 Version 6.7-670-201903001 Version 6.7-670-201904001
References NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3971 CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3971