Use-After-Free Vulnerability in VMware Workstation ALSA Backend

CVE-2019-5525 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.