kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...

kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c

An integer overflow was found in the Linux kernel's vmwgfx driver. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, and able to issue an ioctl on the resulting file descriptor to crash the system, causing a denial of service...

kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...

PT-2024-7335

VMware HCX and Affected Versions VMware HCX versions prior to 4.8.3 VMware HCX versions prior to 4.9.2 VMware HCX versions prior to 4.10.1 Description An authenticated SQL injection flaw exists in the listExtensions method of VMware HCX. This allows a malicious, authenticated user with...

Photon OS 5.0: Curl PHSA-2023-5.0-0113

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0113. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Ncurses PHSA-2023-5.0-0024

An update of the ncurses package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libx11 PHSA-2023-5.0-0112

An update of the libX11 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0112. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libssh2 PHSA-2023-4.0-0465

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0465. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Open PHSA-2023-4.0-0463

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0463. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Calico PHSA-2023-4.0-0518

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0518. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2023-5.0-0181

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0181. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Ansible PHSA-2021-4.0-0038

An update of the ansible package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libtiff PHSA-2023-4.0-0417

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0417. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Cups PHSA-2023-5.0-0035

An update of the cups package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libarchive PHSA-2023-4.0-0417

An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0417. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openresty PHSA-2024-5.0-0185

An update of the openresty package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0185. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Wireshark PHSA-2023-4.0-0521

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0521. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Kubernetes PHSA-2021-3.0-0247

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0247. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Polkit PHSA-2022-3.0-0362

An update of the polkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0362. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libssh PHSA-2023-4.0-0466

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0466. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...