Actively exploited · Published Jun 13, 2023 · Assigned by vmware
CVE-2023-20867VMware Tools Authentication Bypass Vulnerability
Low 3.9 Exploited
In plain English
A low-severity improper authentication in VMware Tools from VMware. Attackers are actively exploiting it in the wild (listed by CISA on June 23, 2023). The chance it is exploited in the next 30 days is estimated at 13.6% (higher than 96% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Jul 14, 2023.
Official description
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | open-vm-tools | 12.1.5-2.el8_8.alma | ALSA-2023:3949 |
| AlmaLinux:9 | open-vm-tools | 12.1.5-1.el9_2.1.alma | ALSA-2023:3948 |
| AlmaLinux:8 | open-vm-tools-desktop | 12.1.5-2.el8_8.alma | ALSA-2023:3949 |
| AlmaLinux:9 | open-vm-tools-desktop | 12.1.5-1.el9_2.1.alma | ALSA-2023:3948 |
| AlmaLinux:8 | open-vm-tools-salt-minion | 12.1.5-2.el8_8.alma | ALSA-2023:3949 |
| AlmaLinux:9 | open-vm-tools-salt-minion | 12.1.5-1.el9_2.1.alma | ALSA-2023:3948 |
| AlmaLinux:8 | open-vm-tools-sdmp | 12.1.5-2.el8_8.alma | ALSA-2023:3949 |
| AlmaLinux:9 | open-vm-tools-sdmp | 12.1.5-1.el9_2.1.alma | ALSA-2023:3948 |
| AlmaLinux:9 | open-vm-tools-test | 12.1.5-1.el9_2.1.alma | ALSA-2023:3948 |
| Alpine:v3.20 | open-vm-tools | 12.2.5-r0 | ALPINE-CVE-2023-20867 |
| Alpine:v3.21 | open-vm-tools | 12.2.5-r0 | ALPINE-CVE-2023-20867 |
| Alpine:v3.22 | open-vm-tools | 12.2.5-r0 | ALPINE-CVE-2023-20867 |
| Alpine:v3.23 | open-vm-tools | 12.2.5-r0 | ALPINE-CVE-2023-20867 |
| Alpine:v3.24 | open-vm-tools | 12.2.5-r0 | ALPINE-CVE-2023-20867 |
| Debian:12 | open-vm-tools | 2:12.2.0-1+deb12u1 | DSA-5493-1 |
| Debian:12 | open-vm-tools | 2:12.2.0-1+deb12u1 | DEBIAN-CVE-2023-20867 |
| Debian:13 | open-vm-tools | 2:12.2.5-1 | DEBIAN-CVE-2023-20867 |
| Debian:14 | open-vm-tools | 2:12.2.5-1 | DEBIAN-CVE-2023-20867 |
| Rocky Linux:8 | open-vm-tools | 0:12.1.5-2.el8_8 | RLSA-2023:3949 |
| Rocky Linux:9 | open-vm-tools | 0:12.1.5-1.el9_2.1 | RLSA-2023:3948 |
| Ubuntu:22.04:LTS | open-vm-tools | 2:12.1.5-3~ubuntu0.22.04.2 | UBUNTU-CVE-2023-20867 |
| Ubuntu:22.04:LTS | open-vm-tools | 2:12.1.5-3~ubuntu0.22.04.2 | USN-6257-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| VMware | VMware Tools | see references |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
References
- https://www.vmware.com/security/advisories/VMSA-2023-0013.html
- https://security.netapp.com/advisory/ntap-20230725-0001/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00020.html
- https://www.debian.org/security/2023/dsa-5493
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W/
- http://www.openwall.com/lists/oss-security/2023/10/16/2
- http://www.openwall.com/lists/oss-security/2023/10/16/11
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20867 government-resource