Red Hat Security Advisory

RHSA-2023:3945

open-vm-tools security update

Released 2023-06-29 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) open-vm-tools-11.0.0-4.el8_2.2, open-vm-tools-desktop-11.0.0-4.el8_2.2
Red Hat Enterprise Linux AppStream E4S (v. 8.2) open-vm-tools-11.0.0-4.el8_2.2, open-vm-tools-desktop-11.0.0-4.el8_2.2
Red Hat Enterprise Linux AppStream TUS (v. 8.2) open-vm-tools-11.0.0-4.el8_2.2, open-vm-tools-desktop-11.0.0-4.el8_2.2

Fixes 1 record

TI-2023-07286 CVE-2023-20867 · GHSA-qm59-f7vh-3m2p

VMware Tools Authentication Bypass Vulnerability

HIGH 76KEV

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

CVSS 3.1LOW 3.9 Local High privileges No interaction EPSS 0.13638 Published 2023-06-13 Fixed in 12.2.5 CWE-287