Log in Start free

Vulnerability · Published Aug 31, 2023 · Assigned by vmware

CVE-2023-20900

High 7.1

In plain English

A high-severity security flaw in VMware Tools. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)1.5%top 26.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8open-vm-tools12.1.5-2.el8_8.3.alma.1ALSA-2023:5312
AlmaLinux:9open-vm-tools12.1.5-1.el9_2.3.alma.1ALSA-2023:5313
AlmaLinux:8open-vm-tools-desktop12.1.5-2.el8_8.3.alma.1ALSA-2023:5312
AlmaLinux:9open-vm-tools-desktop12.1.5-1.el9_2.3.alma.1ALSA-2023:5313
AlmaLinux:8open-vm-tools-salt-minion12.1.5-2.el8_8.3.alma.1ALSA-2023:5312
AlmaLinux:9open-vm-tools-salt-minion12.1.5-1.el9_2.3.alma.1ALSA-2023:5313
AlmaLinux:8open-vm-tools-sdmp12.1.5-2.el8_8.3.alma.1ALSA-2023:5312
AlmaLinux:9open-vm-tools-sdmp12.1.5-1.el9_2.3.alma.1ALSA-2023:5313
AlmaLinux:9open-vm-tools-test12.1.5-1.el9_2.3.alma.1ALSA-2023:5313
Alpine:v3.20open-vm-tools12.3.0-r0ALPINE-CVE-2023-20900
Alpine:v3.21open-vm-tools12.3.0-r0ALPINE-CVE-2023-20900
Alpine:v3.22open-vm-tools12.3.0-r0ALPINE-CVE-2023-20900
Alpine:v3.23open-vm-tools12.3.0-r0ALPINE-CVE-2023-20900
Alpine:v3.24open-vm-tools12.3.0-r0ALPINE-CVE-2023-20900
Debian:12open-vm-tools2:12.2.0-1+deb12u1DSA-5493-1
Debian:12open-vm-tools2:12.2.0-1+deb12u1DEBIAN-CVE-2023-20900
Debian:13open-vm-tools2:12.3.0-1DEBIAN-CVE-2023-20900
Debian:14open-vm-tools2:12.3.0-1DEBIAN-CVE-2023-20900
Rocky Linux:8open-vm-tools0:12.1.5-2.el8_8.3RLSA-2023:5312
Rocky Linux:9open-vm-tools0:12.1.5-1.el9_2.3RLSA-2023:5313
Ubuntu:22.04:LTSopen-vm-tools2:12.1.5-3~ubuntu0.22.04.3UBUNTU-CVE-2023-20900
Ubuntu:22.04:LTSopen-vm-tools2:12.1.5-3~ubuntu0.22.04.3USN-6365-1

Affected products (as reported)

VendorProductVersions
n/a VMware Tools 12.x.x11.x.x10.3.x
n/a VMware Tools 10.3.x
n/a VMware Tools (open-vm-tools) 12.x.x11.x.x10.3.x

References