CVE-2017-4905

lowpriority · track · 32EPSS 0.012 · 68 %ileexploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.20% (68th) EPSS

CVSS 2.1 · low

Is it mine?

14 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-23

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have uninitialized memory usage. This issue may lead to an information leak.

cvss

Technical severity, 0–10. One row per scoring source.

5.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.5

v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.9

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 1.8 · impact 3.6

v3.15.2mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-908USprimary

exploits (1)

Public proof-of-concept and weaponised exploit code.

EDB-47715VMware WorkStation 12.5.3 - Virtual Machine EscapePoC · exploit_db

affected products (14)

Products and version ranges known to be affected.

VMware ESXi≤ 6.5 without patch ESXi650-201703410-SGenisa_euvdEU
VMware ESXi≤ 6.0 U1 without patch ESXi600-201703402-SGenisa_euvdEU
VMware ESXi≤ 6.0 U3 without patch ESXi600-201703401-SGenisa_euvdEU
VMware ESXi≤ 6.0 U2 without patch ESXi600-201703403-SGenisa_euvdEU
VMware ESXi≤ 5.5 without patch ESXi550-201703401-SGenisa_euvdEU
VMware Fusion Pro / Fusion≤ 8.x prior to 8.5.6enisa_euvdEU
VMware Workstation Pro / Player≤ 12.x prior to 12.5.5enisa_euvdEU
vmware esxi= 5.5nvdUScpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*
vmware esxi= 6.0nvdUScpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*
vmware esxi= 6.5nvdUScpe:2.3:o:vmware:esxi:*:*:*:*:*:*:*:*
vmware fusion8.0.0 → 8.5.6nvdUScpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*
vmware fusion pro8.0.0 → 8.5.6nvdUScpe:2.3:a:vmware:fusion_pro:*:*:*:*:*:*:*:*
vmware workstation player12.0.0 → 12.5.5nvdUScpe:2.3:a:vmware:workstation_player:*:*:*:*:*:*:*:*
vmware workstation pro12.0.0 → 12.5.5nvdUScpe:2.3:a:vmware:workstation_pro:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2017-06-07modified 2026-06-17

related (1,060)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-85880US	high7.8OT critical	3.62% (89th)	KEV	2026-09-08
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2025-5777US	high7.5OT critical	100.0% (100th)	KEV	2025-06-17
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2024-50302US	medium5.5OT critical	0.81% (57th)	KEV	2024-11-19
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in variou…
CVE-2024-29745US	medium5.5OT critical	0.49% (41st)	KEV	2024-04-05
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interacti…
CVE-2008-0081US	critical9.8	57.9% (99th)	Exploit	2008-01-16
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via cra…

+1055 more

references (14)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan