CVE:CVE-2020-3960
CNNVD:CNNVD-202006-634
Vmware VMware ESXi是美国威睿（Vmware）公司的一套可直接安装在物理服务器上的服务器虚拟化平台。
VMware ESXi、Workstation和Fusion中的NVMe功能存在缓冲区错误漏洞。攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Vmware ESXi 6.7版本，6.5版本；Workstation 15.x版本；Fusion 11.x版本。
solution:Upgrade vmware fusion to a higher version than 11.5.5,and avoid the version [11.0.0,11.5.5); Upgrade vmware workstation to a higher version than 15.5.5,and avoid the version [15.0.0,15.5.5); Upgrade vmware vsphere_esxi to a higher version than 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201901001,6.5:650-201903001,6.5:650-201905001,6.5:650-201908001,6.5:650-201910001,6.7,6.7:670-201911001,6.7:670-202004001,and avoid the version 6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201901001,6.5:650-201903001,6.5:650-201905001,6.5:650-201908001,6.5:650-201910001,6.7,6.7:670-201911001,6.7:670-202004001