CVE-2021-22040

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-02-2022 06:15

Last modified: - 24-02-2022 08:43

Total changes: - 2

Description

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

High

Privileges required

Unchanged

Scope

None

User interaction

6.7

Base score

0.8

5.9

Exploitability score

Impact score

Verification logic

vendor=vmware AND product=cloud_foundation AND versionStartIncluding=3.0 AND versionEndExcluding=3.11

vendor=vmware AND product=cloud_foundation AND versionStartIncluding=4.0 AND versionEndExcluding=4.4

vendor=vmware AND product=fusion AND versionStartIncluding=12.0.0 AND versionEndExcluding=12.2.1

vendor=vmware AND product=workstation_player AND versionStartIncluding=16.0.0 AND versionEndExcluding=16.2.1

vendor=vmware AND product=workstation_pro AND versionStartIncluding=16.0.0 AND versionEndExcluding=16.2.1

vendor=vmware AND product=esxi AND version=6.5 AND update=-

vendor=vmware AND product=esxi AND version=6.5 AND update=650-202202401

vendor=vmware AND product=esxi AND version=6.7 AND update=-

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201806001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201807001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201808001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810101

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810102

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810103

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810201

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810202

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810203

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810204

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810205

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810206

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810207

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810208

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810209

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810210

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810211

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810212

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810213

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810214

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810215

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810216

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810217

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810218

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810219

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810220

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810221

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810222

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810223

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810224

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810225

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810226

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810227

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810228

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810229

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810230

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810231

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810232

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810233

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201810234

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201811001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201901001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201901401

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201901402

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201901403

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201903001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904201

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904201-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904202

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904202-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904203

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904203-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904204

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904204-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904205

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904205-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904206

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904206-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904207

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904207-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904208

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904208-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904209

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904209-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904210

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904210-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904211

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904211-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904212

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904212-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904213

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904213-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904214

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904214-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904215

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904215-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904216

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904216-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904217

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904217-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904218

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904218-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904219

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904219-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904220

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904220-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904221

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904221-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904222

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904222-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904223

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904223-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904224

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904224-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904225

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904225-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904226

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904226-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904227

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904227-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904228

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904228-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904229

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201904229-ug

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201905001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201906002

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908101

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908102

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908103

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908104

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908201

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908202

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908203

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908204

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908205

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908206

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908207

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908208

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908209

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908210

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908211

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908212

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908213

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908214

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908215

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908216

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908217

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908218

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908219

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908220

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201908221

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201911001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912101

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912102

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912401

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912402

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912403

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912404

vendor=vmware AND product=esxi AND version=6.7 AND update=670-201912405

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004002

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004301

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004401

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004402

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004403

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004404

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004405

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004406

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004407

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202004408

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202006001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202008001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202010001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202011001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202011002

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202102001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202103001

vendor=vmware AND product=esxi AND version=6.7 AND update=670-202111101

vendor=vmware AND product=esxi AND version=7.0 AND update=-

vendor=vmware AND product=esxi AND version=7.0 AND update=update_1

vendor=vmware AND product=esxi AND version=7.0 AND update=update_2

vendor=vmware AND product=esxi AND version=7.0 AND update=update_3

Reference

https://www.vmware.com/security/advisories/VMSA-2022-0004.html

Keywords

CVE-2021-22040

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-22040

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures