CVE-2016-5328

{"id": "CVE-2016-5328", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2016-12-29T09:59:00.180", "references": [{"url": "http://www.securityfocus.com/bid/93886", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1037102", "source": "cve@mitre.org"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2016-0017.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-254"}]}], "descriptions": [{"lang": "en", "value": "VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors."}, {"lang": "es", "value": "VMware Tools 9.x y 10.x en versiones anteriores a 10.1.0 en OS X, cuando System Integrity Protection (SIP) est\u00e1 habilitado, permite a usuarios locales determinar las direcciones de memoria del kernel y eludir el mecanismo de protecci\u00f3n kASLR a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-07-29T01:34:09.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CDCE615-BA28-4932-A47B-A14071A2D8BF", "versionEndIncluding": "10.0.8"}, {"criteria": "cpe:2.3:a:vmware:tools:10.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89B3580E-41A1-4EB8-A97C-34B965B414D3"}, {"criteria": "cpe:2.3:a:vmware:tools:10.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F999AF0-4C3D-476D-A632-D367345259BA"}, {"criteria": "cpe:2.3:a:vmware:tools:10.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A53AE7E3-FB3E-4575-83B3-90D5638A34D0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:tools:9.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F53BD4E0-1377-4AD1-8D6E-3630368C2357"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ABEAC91-A25E-4C4A-A8FA-902DEED4778B"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86B25FE3-1626-458D-B1A3-69D8D3862ECF"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8496AEB-2001-4F69-AE8A-D929110C5920"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABB332F1-5675-409E-9B17-8DCEB6481C5B"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB931B48-FEE8-4987-8DEC-1DEDBB685DC3"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AB253B4-B143-42D7-B93F-300C4DCF7A6F"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F8C1483-2C87-40F9-8AE4-CBB75A3BF0F1"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E3A1F02-756E-4C18-AB60-2B139BDF6158"}, {"criteria": "cpe:2.3:a:vmware:tools:9.0.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC158F12-905C-41D6-A4F8-C3351434F473"}, {"criteria": "cpe:2.3:a:vmware:tools:9.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2696F33-AEB3-4D68-A537-AA29C8CDF4E8"}, {"criteria": "cpe:2.3:a:vmware:tools:9.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C97C8E2-BE58-4EC0-BABA-E23A112B97C1"}, {"criteria": "cpe:2.3:a:vmware:tools:9.4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B68B85BC-D36D-4FF3-B2F6-394D55882ABD"}, {"criteria": "cpe:2.3:a:vmware:tools:9.4.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3C582AB-ED9B-4A44-AA94-6902A4F36266"}, {"criteria": "cpe:2.3:a:vmware:tools:9.4.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32123ECF-4097-4432-A4DC-547EF930A13E"}, {"criteria": "cpe:2.3:a:vmware:tools:9.4.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "260C1C0E-EEB9-41FF-8D32-D1227108E65F"}, {"criteria": "cpe:2.3:a:vmware:tools:9.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA562638-A2D1-4FC1-8B5D-C6765ADA00B0"}, {"criteria": "cpe:2.3:a:vmware:tools:9.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFC86659-B04F-4017-9231-183087231BFA"}, {"criteria": "cpe:2.3:a:vmware:tools:9.10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "322CAF3E-8C85-4B4E-B980-30CAB5DCC77E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}