Red Hat Security AdvisoryRHSA-2023:3944
open-vm-tools security and bug fix update
Released 2023-06-29 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) open-vm-tools-11.0.5-3.el7_9.6, open-vm-tools-desktop-11.0.5-3.el7_9.6
- Red Hat Enterprise Linux Client Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.6, open-vm-tools-test-11.0.5-3.el7_9.6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.6, open-vm-tools-test-11.0.5-3.el7_9.6
- Red Hat Enterprise Linux Server (v. 7) open-vm-tools-11.0.5-3.el7_9.6, open-vm-tools-desktop-11.0.5-3.el7_9.6
- Red Hat Enterprise Linux Server Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.6, open-vm-tools-test-11.0.5-3.el7_9.6
- Red Hat Enterprise Linux Workstation (v. 7) open-vm-tools-11.0.5-3.el7_9.6, open-vm-tools-desktop-11.0.5-3.el7_9.6
- Red Hat Enterprise Linux Workstation Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.6, open-vm-tools-test-11.0.5-3.el7_9.6
Fixes 1 record
Priority HIGH 76KEV
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
CVSS 3.1LOW 3.9· Local · High privileges · No interaction · EPSS 0.13638 · Published 2023-06-13 · Fixed in 12.2.5 CWE-287
