Slow your roll: VMware urges admins to apply workarounds to DoS-inducing 3D render vuln | 10/11/2018 | Staff
tiazanne (Posted by) Level 3
Click For Photo:

VMware has warned users about an "important" denial-of-service vuln in ESXi, Workstation and Fusion that hinges on a problem with 3D rendering.

The vuln (CVE-2018-6977) allows an attacker with normal local user privileges to trigger an infinite loop in a 3D-rendering shader. According to VMware, a "specially crafted 3D shader may loop for an infinite amount of time and lock up a VM's virtual graphics device".

VMware - Hypervisor - Host - Box - Graphics

If that happens, VMware warned, the hypervisor may rely on the host box's graphics driver to ensure other users of the physical machine are not impacted by the infinite graphical loop.

"However, many graphics drivers may themselves get into to a denial-of-service condition caused by such infinite shaders,...
(Excerpt) Read more at:
Wake Up To Breaking News!
Sign In or Register to comment.

Welcome to Long Room!

Where The World Finds Its News!