CVE-2017-4915

CVE Database · CVE-2017-4915

CVE-2017-4915

· N/AModified

CVSS v3.1

N/A

EPSS

5.41%

Published

May 22, 2017

Modified

May 12, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBVMware Workstation for Linux 12.5.2 build-4638234 - ALSA Configuration Host Local Privilege Escalation Exploit-DBVMware Workstation/Player < 12.5.5 - Local Privilege Escalation TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.

Weaknesses (CWE)

CWE-863

Affected Products (3)

vmware · workstation_playervulnerable

vmware · workstation_provulnerable

linux · linux_kernel

References (8)

http://www.securityfocus.com/bid/98566

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038525

https://www.exploit-db.com/exploits/42045/

https://www.vmware.com/security/advisories/VMSA-2017-0009.html