Lucene search
UbuntuUSN-6463-1HistoryOct 31, 2023 - 12:00 a.m.
Open VM Tools vulnerabilities
2023-10-3100:00:00
ubuntu.com
21
ubuntu 23.10
ubuntu 23.04
ubuntu 22.04 lts
ubuntu 20.04 lts
open-vm-tools
saml tokens
guest operations privileges
cve-2023-34058
matthias gerstner
file descriptors
/dev/uinput
user inputs
cve-2023-34059
7.5 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.0%
Releases
- Ubuntu 23.10
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- open-vm-tools - Open VMware Tools for virtual machines hosted on VMware
Details
It was discovered that Open VM Tools incorrectly handled SAML tokens. A
remote attacker Guest Operations privileges could possibly use this issue
to escalate privileges. (CVE-2023-34058)
Matthias Gerstner discovered that Open VM Tools incorrectly handled file
descriptors when dropping privileges. A local attacker could possibly use
this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | open-vm-tools | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-containerinfo | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-containerinfo-dbgsym | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-dbgsym | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-desktop | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-desktop-dbgsym | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-dev | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-salt-minion | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-sdmp | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | open-vm-tools-sdmp-dbgsym | < 2:12.3.0-1ubuntu0.1 | UNKNOWN |
Related
nessus
nessus
Debian DSA-5543-1 : open-vm-tools - security update
2023-11-01 00:00:00
RHEL 9 : open-vm-tools (RHSA-2023:7267)
2023-11-15 00:00:00
RHEL 8 : open-vm-tools (RHSA-2023:7265)
2023-11-15 00:00:00
redhat
redhat
(RHSA-2023:7263) Important: open-vm-tools security update
2023-11-15 17:58:52
(RHSA-2023:7261) Important: open-vm-tools security update
2023-11-15 17:53:56
(RHSA-2023:7279) Important: open-vm-tools security update
2023-11-15 19:00:21
osv
osv
Important: open-vm-tools security update
2023-11-15 00:00:00
open-vm-tools vulnerabilities
2023-10-31 14:47:07
open-vm-tools vulnerabilities
2023-12-06 09:43:32
openvas
openvas
Fedora: Security Advisory for open-vm-tools (FEDORA-2023-86a50ffc72)
2023-11-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4228-1)
2023-10-30 00:00:00
CentOS: Security Advisory for open-vm-tools (CESA-2023:7279)
2024-03-05 00:00:00
freebsd
freebsd
open-vm-tools -- Multiple vulnerabilities
2023-10-26 00:00:00
rocky
rocky
open-vm-tools security update
2023-11-28 22:43:02
oraclelinux
oraclelinux
open-vm-tools security update
2023-11-16 00:00:00
open-vm-tools security update
2023-11-16 00:00:00
open-vm-tools security update
2023-11-21 00:00:00
almalinux
almalinux
Important: open-vm-tools security update
2023-11-15 00:00:00
Important: open-vm-tools security update
2023-11-15 00:00:00
debian
debian
[SECURITY] [DSA 5543-1] open-vm-tools security update
2023-10-31 19:29:14
[SECURITY] [DLA 3646-1] open-vm-tools security update
2023-11-05 22:18:02
amazon
amazon
Important: open-vm-tools
2023-10-30 23:59:00
ubuntu
ubuntu
Open VM Tools vulnerabilities
2023-12-06 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: open-vm-tools-12.3.0-3.fc37
2023-11-08 01:21:13
[SECURITY] Fedora 39 Update: open-vm-tools-12.3.0-3.fc39
2023-11-08 01:27:44
[SECURITY] Fedora 38 Update: open-vm-tools-12.3.0-3.fc38
2023-11-08 01:40:15
centos
centos
open security update
2024-01-12 19:15:38
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0675
2023-10-27 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0127
2023-10-27 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0499
2023-10-27 00:00:00
mageia
mageia
Updated open-vm-tools packages fix security vulnerabilities
2024-03-14 20:25:59
cvelist
cvelist
CVE-2023-34058
2023-10-27 04:53:09
CVE-2023-34059
2023-10-27 04:53:31
debiancve
debiancve
CVE-2023-34059
2023-10-27 05:15:39
CVE-2023-34058
2023-10-27 05:15:38
cbl_mariner
cbl_mariner
nvd
nvd
CVE-2023-34059
2023-10-27 05:15:39
CVE-2023-34058
2023-10-27 05:15:38
prion
prion
Design/Logic Flaw
2023-10-27 05:15:00
Security feature bypass
2023-10-27 05:15:00
veracode
veracode
Privilege Escalation
2023-10-29 13:25:45
SAML Token Signature Bypass
2023-10-29 13:19:59
f5
f5
K000138114 : open-vm-tools vulnerability CVE-2023-34058
2024-01-02 00:00:00
ubuntucve
ubuntucve
CVE-2023-34059
2023-10-26 00:00:00
CVE-2023-34058
2023-10-26 00:00:00
redhatcve
redhatcve
CVE-2023-34059
2023-10-30 13:43:17
CVE-2023-34058
2023-10-30 13:43:11
cve
cve
CVE-2023-34059
2023-10-27 05:15:39
CVE-2023-34058
2023-10-27 05:15:38
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-01-17 10:00:35
7.5 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.0%
Related for USN-6463-1