Vulnerability · Published Oct 27, 2023 · Assigned by vmware
CVE-2023-34058
High 7.1
In plain English
A high-severity security flaw in open-vm-tools. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | open-vm-tools | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:8 | open-vm-tools-desktop | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools-desktop | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:8 | open-vm-tools-salt-minion | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools-salt-minion | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:8 | open-vm-tools-sdmp | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools-sdmp | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:9 | open-vm-tools-test | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| Debian:12 | open-vm-tools | 2:12.2.0-1+deb12u2 | DEBIAN-CVE-2023-34058 |
| Debian:12 | open-vm-tools | 2:12.2.0-1+deb12u2 | DSA-5543-1 |
| Debian:13 | open-vm-tools | 2:12.3.5-1 | DEBIAN-CVE-2023-34058 |
| Debian:14 | open-vm-tools | 2:12.3.5-1 | DEBIAN-CVE-2023-34058 |
| Rocky Linux:8 | open-vm-tools | 0:12.2.5-3.el8_9.1 | RLSA-2023:7265 |
| Ubuntu:22.04:LTS | open-vm-tools | 2:12.1.5-3~ubuntu0.22.04.4 | USN-6463-1 |
| Ubuntu:22.04:LTS | open-vm-tools | 2:12.1.5-3~ubuntu0.22.04.4 | UBUNTU-CVE-2023-34058 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware Tools | 12.x.x11.x.x10.3.x |
| n/a | open-vm-tools | 11.0.0 – through 12.3.0 |
Weakness: CWE-347 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.vmware.com/security/advisories/VMSA-2023-0024.html
- http://www.openwall.com/lists/oss-security/2023/10/27/1
- https://www.debian.org/security/2023/dsa-5543
- https://lists.debian.org/debian-lts-announce/2023/11/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/