CVE-2019-5528: VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process

Medium severity · published Jul 11, 2019

CVE-2019-5528

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process

5.3

CVSS

1.7%

EPSS

On KEV

Description

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

Low

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.7% · higher than 77% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

ESXi · VMware

6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more · source: NVD

Affected product

ESXi

VMware

All ESXi CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2019-5528

CVE.org

https://www.cve.org/CVERecord?id=CVE-2019-5528

Third Party Advisory

http://www.securityfocus.com/bid/109130

Patch

https://www.vmware.com/security/advisories/VMSA-2019-0011.html