CVE-2019-5525 - VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend

Back Back to CVE browser

HIGH

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend

Published Jun 6, 2019

8.8

HIGH

CVSS 3.0

EPSS 0.44%

Description

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Affected products

Vendor VMware Product VMware Workstation Default
n/a
- Version
  VMware Workstation (15.x before 15.1.0)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

VMware

VMware Workstation

n/a

Version	Status	Constraints
VMware Workstation (15.x before 15.1.0)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

http://www.securityfocus.com/bid/108674
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.vmware.com/security/advisories/VMSA-2019-0009.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/108674		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.vmware.com/security/advisories/VMSA-2019-0009.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner vmware

Published Jun 6, 2019

Updated Aug 4, 2024

Reserved Jan 7, 2019

Link CVE-2019-5525

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5525

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5525