CVE-2023-34059
7.0
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: NVD
Description
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the
/dev/uinput file descriptor allowing them to simulate user inputs.
Affected (4)
Products: Vmware: Open Vm Tools · Debian: Debian Linux
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.0.0 to 12.3.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
References (21)
Source: security@vmware.com
Mailing ListPatchThird Party Advisory
Source: security@vmware.com
Mailing ListThird Party Advisory
Source: security@vmware.com
Source: security@vmware.com
Source: security@vmware.com
Mailing ListThird Party Advisory
Source: security@vmware.com
Source: security@vmware.com
Source: security@vmware.com
Source: security@vmware.com
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Timeline
No history available yet.