CVE:CVE-2019-5517
CNNVD:CNNVD-201904-608
VMware ESXi等都是美国威睿（VMware）公司的产品。VMware ESXi是一套可直接安装在物理服务器上的服务器虚拟化平台。VMware Workstation是一套虚拟机软件。VMware Fusion是一套专用于在苹果机（Mac）上运行Windows应用程序的的虚拟机软件。
Vmware ESXi、Workstation和Fusion中存在越界读取漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：Vmware ESXi 6.7版本，6.5版本；Workstation 15.x版本，14.x版本；Fusion 11.x版本，10.x版本。
solution:Upgrade vmware fusion to a higher version than 10.1.6,11.0.3,and avoid the version [10.0.0,10.1.6),[11.0.0,11.0.3); Upgrade vmware workstation to a higher version than 14.1.6,15.0.3,and avoid the version [14.0.0,14.1.6),[15.0.0,15.0.3); Upgrade vmware esxi to a higher version than 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201811002,6.5:650-201811301,6.5:650-201901001,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,6.7:670-201810101,6.7:670-201810102,6.7:670-201810103,6.7:670-201810201,6.7:670-201810202,6.7:670-201810203,6.7:670-201810204,6.7:670-201810205,6.7:670-201810206,6.7:670-201810207,6.7:670-201810208,6.7:670-201810209,6.7:670-201810210,6.7:670-201810211,6.7:670-201810212,6.7:670-201810213,6.7:670-201810214,6.7:670-201810215,6.7:670-201810216,6.7:670-201810217,6.7:670-201810218,6.7:670-201810219,6.7:670-201810220,6.7:670-201810221,6.7:670-201810222,6.7:670-201810223,6.7:670-201810224,6.7:670-201810225,6.7:670-201810226,6.7:670-201810227,6.7:670-201810228,6.7:670-201810229,6.7:670-201810230,6.7:670-201810231,6.7:670-201810232,6.7:670-201810233,6.7:670-201810234,6.7:670-201811001,6.7:670-201901001,6.7:670-201901401,6.7:670-201901402,6.7:670-201901403,6.7:670-201904201,6.7:670-201904202,6.7:670-201904203,6.7:670-201904204,6.7:670-201904205,6.7:670-201904206,6.7:670-201904207,6.7:670-201904208,6.7:670-201904209,6.7:670-201904210,6.7:670-201904211,6.7:670-201904212,6.7:670-201904213,6.7:670-201904214,6.7:670-201904215,6.7:670-201904216,6.7:670-201904217,6.7:670-201904218,6.7:670-201904219,6.7:670-201904220,6.7:670-201904221,6.7:670-201904222,6.7:670-201904223,6.7:670-201904224,6.7:670-201904225,6.7:670-201904226,6.7:670-201904227,6.7:670-201904228,6.7:670-201904229,and avoid the version 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201811002,6.5:650-201811301,6.5:650-201901001,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,6.7:670-201810101,6.7:670-201810102,6.7:670-201810103,6.7:670-201810201,6.7:670-201810202,6.7:670-201810203,6.7:670-201810204,6.7:670-201810205,6.7:670-201810206,6.7:670-201810207,6.7:670-201810208,6.7:670-201810209,6.7:670-201810210,6.7:670-201810211,6.7:670-201810212,6.7:670-201810213,6.7:670-201810214,6.7:670-201810215,6.7:670-201810216,6.7:670-201810217,6.7:670-201810218,6.7:670-201810219,6.7:670-201810220,6.7:670-201810221,6.7:670-201810222,6.7:670-201810223,6.7:670-201810224,6.7:670-201810225,6.7:670-201810226,6.7:670-201810227,6.7:670-201810228,6.7:670-201810229,6.7:670-201810230,6.7:670-201810231,6.7:670-201810232,6.7:670-201810233,6.7:670-201810234,6.7:670-201811001,6.7:670-201901001,6.7:670-201901401,6.7:670-201901402,6.7:670-201901403,6.7:670-201904201,6.7:670-201904202,6.7:670-201904203,6.7:670-201904204,6.7:670-201904205,6.7:670-201904206,6.7:670-201904207,6.7:670-201904208,6.7:670-201904209,6.7:670-201904210,6.7:670-201904211,6.7:670-201904212,6.7:670-201904213,6.7:670-201904214,6.7:670-201904215,6.7:670-201904216,6.7:670-201904217,6.7:670-201904218,6.7:670-201904219,6.7:670-201904220,6.7:670-201904221,6.7:670-201904222,6.7:670-201904223,6.7:670-201904224,6.7:670-201904225,6.7:670-201904226,6.7:670-201904227,6.7:670-201904228,6.7:670-201904229