Loading

×Sorry to interrupt
Uncaught ReferenceError: addCTracking is not defined
throws at https://kb.vmware.com/resource/KM_TealiumTrackingJS?v=0.5:100:1

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

Instructions to remediate VMware Fusion setuid security vulnerability (CVE-2020-3950) (78294)

Last Updated: 3/19/2020Categories: SecurityTotal Views: 3857Language:
English

2 like this article

Subscribe to get an email
newsletter with new updates

2 people found this helpful Please provide article feedback:

Symptoms

This article contains instructions to address CVE-2020-3950 in VMware Fusion. This vulnerability and its impact on VMware products are documented in VMSA-2020-0005 . Please review this advisory before continuing as there may be considerations outside the scope of this document.
The VMware Fusion team has investigated CVE-2020-3950 and determined that the possibility of exploitation can be removed by performing the steps detailed in the ‘Resolution’ section of this article.
VMware Fusion Functionality Impact
None.

Resolution

Steps to follow as root user on the system to remediate CVE-2020-3950 in VMware Fusion:

Update the version of Fusion to 11.5.2.

Quit Fusion.

Download the FusionOpenUSB_update1.zip file attached to this Knowledge Base article which contains a replacement for the file "Open VMware USB Arbitrator Service", unzip it.

Copy the original "Open VMware USB Arbitrator Service" to another name in "Documents" folder for backup purposes:

sudo cp -f "<Fusion installed directory>/Contents/Library/services/Open VMware USB Arbitrator Service" "~/Documents/Open VMware USB Arbitrator Service backup"

Copy the downloaded version of "Open VMware USB Arbitrator Service" over the original file:

cd /<path to unzipped FusionOpenUSB_update1>/FusionOpenUSB
sudo cp -f "./Open VMware USB Arbitrator Service" "<Fusion installed directory>/Contents/Library/services/Open VMware USB Arbitrator Service"

Start Fusion.

Step to follow to remove (“undo”) the remediation of CVE-2020-3950 in VMware Fusion:

Quit Fusion.

Rename the backup file "Open VMware USB Arbitrator Service backup" to its original name:

sudo cp -f "~/Documents/Open VMware USB Arbitrator Service backup" "<Fusion installed directory>/Contents/Library/services/Open VMware USB Arbitrator Service"

Start Fusion.

NOTE: <Fusion installed directory> is the directory where VMware Fusion is installed. In MacOS VMware Fusion installation directory is by default "/Applications/VMware Fusion.app", in case of any custom directory use that custom directory path.

Checksum of the file:  fixFusionOpenUSB_update1.zip

MD5SUM: 74683e01efcec3486a3dae887f37a3b4
SHA1SUM: 65b9a30edd6cc1258fa8fdb3a410ae6d9098635d
SHA256SUM: f0c0c8d9b4af735ff8757b8eaf7592a40cdb62eec15e77c0ebe24840c40f6b5f

Checksum of the file: Open VMware USB Arbitrator Service
MD5SUM: da9fb0dcb2cf6ffbe66376b06621a0bf
SHA1SUM: 38c9638260fe2fbe679422ef421b66698bde8baf
SHA256SUM: 27eb61772f907e9fdd340218b983287be437b34af88fcfaf8f1801490ca7109c

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

fixFusionOpenUSB_update1

Additional Resources

KB
•
「AMQP ブローカ接続のテスト：失敗 - ACCESS_REFUSED - 認証メカニズム PLAIN を使用したログインが拒否されました。詳細については、ブローカのログ ファイルを参照してください。(Test AMQP Broker Connection: Failed - ACCESS_REFUSED - Login was refused using authentication mechanism PLAIN. For details see the broker logfile.)」 (76149)

KB
•
从 vSphere 控制台访问 vRealize Operations Manager 节点 (78377)

KB
•
更改 SRM 站点清单映射后，无法更新现有保护组（受保护的虚拟机）上的清单映射 (78232)

KB
•
ピリオドで始まる仮想マシン ファイルをダウンロードできない (78286)

KB
•
在 ESXi 6.7 及更高版本中，虚拟交换机不会将格式错误的数据包传输到虚拟机 (78283)

Results 1-5 of 5

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware Fusion

Related Versions:

Take Our Survey

Support Assistant