VMware response to Load Value Injection (CVE-2020-0551) speculative execution vulnerability in Intel processors

Products

• VMware Desktop Hypervisor
• VMware vSphere ESXi

Issue/Introduction

On March 9th, 2020 a vulnerability was disclosed by Intel in INTEL-SA-00334

VMware has concluded investigations on the impact this vulnerability may have on our products.

Resolution

After thorough review, VMware has not identified an attack vector whereby Load Value Injection (CVE-2020-0551) can be used to exploit VMware Hypervisors.

The Update History section of this article will be revised if there is a significant change. Click Subscribe to be alerted when new information is added to this document and sign up at our VMware Security Advisories to receive new and updated VMware Security Advisories.