Vulnerability · Published Oct 27, 2023 · Assigned by vmware
CVE-2023-34059
High 7.4
In plain English
A high-severity security flaw in open-vm-tools. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.4%top 66.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | open-vm-tools | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:8 | open-vm-tools-desktop | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools-desktop | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:8 | open-vm-tools-salt-minion | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools-salt-minion | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:8 | open-vm-tools-sdmp | 12.2.5-3.el8_9.1.alma.1 | ALSA-2023:7265 |
| AlmaLinux:9 | open-vm-tools-sdmp | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| AlmaLinux:9 | open-vm-tools-test | 12.2.5-3.el9_3.2.alma.1 | ALSA-2023:7277 |
| Debian:12 | open-vm-tools | 2:12.2.0-1+deb12u2 | DEBIAN-CVE-2023-34059 |
| Debian:12 | open-vm-tools | 2:12.2.0-1+deb12u2 | DSA-5543-1 |
| Debian:13 | open-vm-tools | 2:12.3.5-1 | DEBIAN-CVE-2023-34059 |
| Debian:14 | open-vm-tools | 2:12.3.5-1 | DEBIAN-CVE-2023-34059 |
| Rocky Linux:8 | open-vm-tools | 0:12.2.5-3.el8_9.1 | RLSA-2023:7265 |
| Ubuntu:22.04:LTS | open-vm-tools | 2:12.1.5-3~ubuntu0.22.04.4 | USN-6463-1 |
| Ubuntu:22.04:LTS | open-vm-tools | 2:12.1.5-3~ubuntu0.22.04.4 | UBUNTU-CVE-2023-34059 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | open-vm-tools | 11.0.0 – through 12.3.0 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.vmware.com/security/advisories/VMSA-2023-0024.html
- http://www.openwall.com/lists/oss-security/2023/10/27/3
- http://www.openwall.com/lists/oss-security/2023/10/27/2
- https://www.debian.org/security/2023/dsa-5543
- https://lists.debian.org/debian-lts-announce/2023/11/msg00002.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/
- http://www.openwall.com/lists/oss-security/2023/11/26/1
- http://www.openwall.com/lists/oss-security/2023/11/27/1
- https://www.openwall.com/lists/oss-security/2023/10/27/3 exploit