Vulnerability · Published Jun 18, 2021 · Assigned by vmware
CVE-2021-21997
Medium 5.5
In plain English
A medium-severity security flaw in VMware Tools for Windows. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 51% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.7%top 48.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest operating system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware Tools for Windows | VMware Tools for Windows (11.x.y prior to 11.3.0) |
References
- https://www.vmware.com/security/advisories/VMSA-2021-0011.html x_refsource_MISC