Software update: VMware Workstation Player 15.5.1

VMware has released version 15.5.1 Workstation Player. Player is free software that can be used to create and run virtual machines. However, a fee is charged for commercial use. Simply put, it is a simplified implementation of other VMware products such as Workstation Pro, Server and ESX Server. Microsoft Virtual PC virtual machines and Symantec LiveState Recovery disks are also supported. In addition, various pre-installed virtual machines can be connected via this page downloaded, such as Debian, Ubuntu and Fedora. In version 15.5.1, the following security vulnerabilities have been fixed.

This release of VMware Workstation Player addresses the following issues:

• Workstation 15.5.1 Player addresses an out-of-bounds write vulnerability in the e1000e virtual network adapter. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5541 to this issue. For more information, see VMSA-2019-0021.
• Workstation 15.5.1 Player addresses an information disclosure vulnerability in vmnetdhcp. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5540 to this issue. For more information, see VMSA-2019-0021.
• Workstation 15.5.1 Player addresses a denial-of-service vulnerability in the RPC handler. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5542 to this issue. For more information, see VMSA-2019-0021.
• Workstation 15.5.1 Player resolves TSX Asynchronous Abort (TAA), a speculative execution vulnerability identified by CVE-2019-11135. For more information, see section 3b in VMSA-2019-0020.
• Workstation 15.5.1 Player resolves a regression introduced in Workstation 15.5.0 Player which causes the Hypervisor-Specific mitigations for for L1TF and MDS vulnerabilities to be ineffective. For more information on these mitigations, please see section 3a in VMSA-2019-0008.