Red Hat Security Advisory

RHSA-2023:7261

open-vm-tools security update

Released 2023-11-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) open-vm-tools-11.0.0-4.el8_2.4, open-vm-tools-desktop-11.0.0-4.el8_2.4
Red Hat Enterprise Linux AppStream E4S (v. 8.2) open-vm-tools-11.0.0-4.el8_2.4, open-vm-tools-desktop-11.0.0-4.el8_2.4
Red Hat Enterprise Linux AppStream TUS (v. 8.2) open-vm-tools-11.0.0-4.el8_2.4, open-vm-tools-desktop-11.0.0-4.el8_2.4

TI-2023-16925 CVE-2023-34059 · GHSA-q6p8-m5f4-4vmp

HIGH 68

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00396 Published 2023-10-27 Fixed CWE-404

TI-2023-16924 CVE-2023-34058 · GHSA-h5hf-5wcj-6hmf

LOW 36

VMware Tools contains a SAML token signature bypass vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00813 Published 2023-10-27 Fixed CWE-347