Bug 241150 (CVE-2008-4279) – app-emulation/vmware-* privilege escalation from guest (CVE-2008-4279)

• Product: Gentoo Security
• Status: RESOLVED DUPLICATE

[Description Stefan Behte (RETIRED) 2008-10-10 20:02:59 UTC]

CVE-2008-4279 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4279):
  The CPU hardware emulation for 64-bit guest operating systems in
  VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before
  5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x
  before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4
  through 3.5 allows authenticated guest OS users to gain additional
  guest OS privileges by triggering an exception that causes the
  virtual CPU to perform an indirect jump to a non-canonical address.

[Comment 1 Stefan Behte (RETIRED) 2008-10-10 20:12:54 UTC]

You cannot run an amd64 guest on x86, so this only affects amd64.
We have in tree:

app-emulation/vmware-workstation-5.5.7.91707 (amd64)
app-emulation/vmware-workstation-5.5.8.108000 (~amd64)
app-emulation/vmware-workstation-6.0.4.93057 (~amd64)
app-emulation/vmware-workstation-6.0.5.109488 (~amd64)

app-emulation/vmware-server-1.0.5.80187 (amd64)
app-emulation/vmware-server-1.0.6.91891 (amd64)
app-emulation/vmware-server-1.0.7.108231 (~amd64)

app-emulation/vmware-player-1.0.7.91707 (amd64)
app-emulation/vmware-player-1.0.8.108000 (~amd64)
app-emulation/vmware-player-2.0.4.93057 (~amd64)
app-emulation/vmware-player-2.0.5.109488 (~amd64)

I guess we should mask the old ones. I gave this one B3 because VMs are often used for security purposes and it would have severe consequences if one could escape one VM and control all others.

[Comment 2 Mike Auty (RETIRED) 2008-10-11 00:02:40 UTC]

I think this can probably be rolled into bug 236167, which seems to be stalled (although I've added everything necessary to the tree, as far as I'm aware)...

[Comment 3 Stefan Behte (RETIRED) 2008-10-19 11:44:03 UTC]

OK!

*** This bug has been marked as a duplicate of bug 236167 ***