CVE:CVE-2020-4004
CNNVD:CNNVD-202011-1762
Vmware VMware ESXi是美国威睿（Vmware）公司的一套可直接安装在物理服务器上的服务器虚拟化平台。
VMware ESXi 存在安全漏洞，该漏洞源于XHCI USB控制器中包含无后使用漏洞。在虚拟机上具有本地管理权限的恶意参与者可能会利用这个问题来执行在主机上运行的虚拟机的VMX进程的代码。以下产品及版本受到影响：VMware ESXi 7.0 ESXi70U1b-17168206 之前版本, 6.7 ESXi670-202011101-SG 之前版本, 6.5 ESXi650-202011301-SG 之前版本, Workstation 15.x系列15.5.7之前版本, Fusion 11.x系列11.5.7之前版本。
solution:Upgrade vmware fusion to a higher version than 11.5.7,and avoid the version [11.0,11.5.7); Upgrade vmware cloud_foundation to a higher version than 3.10.1.2,4.1.0.1,and avoid the version [3.0,3.10.1.2),[4.0,4.1.0.1); Upgrade vmware workstation to a higher version than 15.5.7,and avoid the version [15.0.0,15.5.7); Upgrade vmware esxi to a higher version than 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201811002,6.5:650-201811301,6.5:650-201901001,6.5:650-201903001,6.5:650-201905001,6.5:650-201908001,6.5:650-201910001,6.5:650-20191004001,6.5:650-201911001,6.5:650-201911401,6.5:650-201911402,6.5:650-201912001,6.5:650-201912002,6.5:650-201912101,6.5:650-201912102,6.5:650-201912103,6.5:650-201912104,6.5:650-201912301,6.5:650-201912401,6.5:650-201912402,6.5:650-201912403,6.5:650-201912404,6.5:650-202005001,6.5:650-202006001,6.5:650-202007001,6.5:650-202010001,6.5:650-202011001,6.5:650-202011002,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,6.7:670-201810101,6.7:670-201810102,6.7:670-201810103,6.7:670-201810201,6.7:670-201810202,6.7:670-201810203,6.7:670-201810204,6.7:670-201810205,6.7:670-201810206,6.7:670-201810207,6.7:670-201810208,6.7:670-201810209,6.7:670-201810210,6.7:670-201810211,6.7:670-201810212,6.7:670-201810213,6.7:670-201810214,6.7:670-201810215,6.7:670-201810216,6.7:670-201810217,6.7:670-201810218,6.7:670-201810219,6.7:670-201810220,6.7:670-201810221,6.7:670-201810222,6.7:670-201810223,6.7:670-201810224,6.7:670-201810225,6.7:670-201810226,6.7:670-201810227,6.7:670-201810228,6.7:670-201810229,6.7:670-201810230,6.7:670-201810231,6.7:670-201810232,6.7:670-201810233,6.7:670-201810234,6.7:670-201811001,6.7:670-201901001,6.7:670-201901401,6.7:670-201901402,6.7:670-201901403,6.7:670-201903001,6.7:670-201904001,6.7:670-201904201,6.7:670-201904201-ug,6.7:670-201904202,6.7:670-201904202-ug,6.7:670-201904203,6.7:670-201904203-ug,6.7:670-201904204,6.7:670-201904204-ug,6.7:670-201904205,6.7:670-201904205-ug,6.7:670-201904206,6.7:670-201904206-ug,6.7:670-201904207,6.7:670-201904207-ug,6.7:670-201904208,6.7:670-201904208-ug,6.7:670-201904209,6.7:670-201904209-ug,6.7:670-201904210,6.7:670-201904210-ug,6.7:670-201904211,6.7:670-201904211-ug,6.7:670-201904212,6.7:670-201904212-ug,6.7:670-201904213,6.7:670-201904213-ug,6.7:670-201904214,6.7:670-201904214-ug,6.7:670-201904215,6.7:670-201904215-ug,6.7:670-201904216,6.7:670-201904216-ug,6.7:670-201904217,6.7:670-201904217-ug,6.7:670-201904218,6.7:670-201904218-ug,6.7:670-201904219,6.7:670-201904219-ug,6.7:670-201904220,6.7:670-201904220-ug,6.7:670-201904221,6.7:670-201904221-ug,6.7:670-201904222,6.7:670-201904222-ug,6.7:670-201904223,6.7:670-201904223-ug,6.7:670-201904224,6.7:670-201904224-ug,6.7:670-201904225,6.7:670-201904225-ug,6.7:670-201904226,6.7:670-201905001,6.7:670-201906002,6.7:670-201911001,6.7:670-201912001,6.7:670-202004001,6.7:670-202004002,6.7:670-202006001,6.7:670-202008001,6.7:670-202010001,7.0,7.0:beta,7.0:update_1,7.0:update_1a,7.0:update_1b,and avoid the version 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201811002,6.5:650-201811301,6.5:650-201901001,6.5:650-201903001,6.5:650-201905001,6.5:650-201908001,6.5:650-201910001,6.5:650-20191004001,6.5:650-201911001,6.5:650-201911401,6.5:650-201911402,6.5:650-201912001,6.5:650-201912002,6.5:650-201912101,6.5:650-201912102,6.5:650-201912103,6.5:650-201912104,6.5:650-201912301,6.5:650-201912401,6.5:650-201912402,6.5:650-201912403,6.5:650-201912404,6.5:650-202005001,6.5:650-202006001,6.5:650-202007001,6.5:650-202010001,6.5:650-202011001,6.5:650-202011002,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,6.7:670-201810101,6.7:670-201810102,6.7:670-201810103,6.7:670-201810201,6.7:670-201810202,6.7:670-201810203,6.7:670-201810204,6.7:670-201810205,6.7:670-201810206,6.7:670-201810207,6.7:670-201810208,6.7:670-201810209,6.7:670-201810210,6.7:670-201810211,6.7:670-201810212,6.7:670-201810213,6.7:670-201810214,6.7:670-201810215,6.7:670-201810216,6.7:670-201810217,6.7:670-201810218,6.7:670-201810219,6.7:670-201810220,6.7:670-201810221,6.7:670-201810222,6.7:670-201810223,6.7:670-201810224,6.7:670-201810225,6.7:670-201810226,6.7:670-201810227,6.7:670-201810228,6.7:670-201810229,6.7:670-201810230,6.7:670-201810231,6.7:670-201810232,6.7:670-201810233,6.7:670-201810234,6.7:670-201811001,6.7:670-201901001,6.7:670-201901401,6.7:670-201901402,6.7:670-201901403,6.7:670-201903001,6.7:670-201904001,6.7:670-201904201,6.7:670-201904201-ug,6.7:670-201904202,6.7:670-201904202-ug,6.7:670-201904203,6.7:670-201904203-ug,6.7:670-201904204,6.7:670-201904204-ug,6.7:670-201904205,6.7:670-201904205-ug,6.7:670-201904206,6.7:670-201904206-ug,6.7:670-201904207,6.7:670-201904207-ug,6.7:670-201904208,6.7:670-201904208-ug,6.7:670-201904209,6.7:670-201904209-ug,6.7:670-201904210,6.7:670-201904210-ug,6.7:670-201904211,6.7:670-201904211-ug,6.7:670-201904212,6.7:670-201904212-ug,6.7:670-201904213,6.7:670-201904213-ug,6.7:670-201904214,6.7:670-201904214-ug,6.7:670-201904215,6.7:670-201904215-ug,6.7:670-201904216,6.7:670-201904216-ug,6.7:670-201904217,6.7:670-201904217-ug,6.7:670-201904218,6.7:670-201904218-ug,6.7:670-201904219,6.7:670-201904219-ug,6.7:670-201904220,6.7:670-201904220-ug,6.7:670-201904221,6.7:670-201904221-ug,6.7:670-201904222,6.7:670-201904222-ug,6.7:670-201904223,6.7:670-201904223-ug,6.7:670-201904224,6.7:670-201904224-ug,6.7:670-201904225,6.7:670-201904225-ug,6.7:670-201904226,6.7:670-201905001,6.7:670-201906002,6.7:670-201911001,6.7:670-201912001,6.7:670-202004001,6.7:670-202004002,6.7:670-202006001,6.7:670-202008001,6.7:670-202010001,7.0,7.0:beta,7.0:update_1,7.0:update_1a,7.0:update_1b