Red Hat Security Advisory

RHSA-2023:7262

open-vm-tools security update

Released 2023-11-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) open-vm-tools-11.2.0-2.el8_4.4, open-vm-tools-desktop-11.2.0-2.el8_4.4, open-vm-tools-sdmp-11.2.0-2.el8_4.4
Red Hat Enterprise Linux AppStream E4S (v.8.4) open-vm-tools-11.2.0-2.el8_4.4, open-vm-tools-desktop-11.2.0-2.el8_4.4, open-vm-tools-sdmp-11.2.0-2.el8_4.4
Red Hat Enterprise Linux AppStream TUS (v.8.4) open-vm-tools-11.2.0-2.el8_4.4, open-vm-tools-desktop-11.2.0-2.el8_4.4, open-vm-tools-sdmp-11.2.0-2.el8_4.4

TI-2023-16925 CVE-2023-34059 · GHSA-q6p8-m5f4-4vmp

HIGH 68

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00396 Published 2023-10-27 Fixed CWE-404

TI-2023-16924 CVE-2023-34058 · GHSA-h5hf-5wcj-6hmf

LOW 36

VMware Tools contains a SAML token signature bypass vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00813 Published 2023-10-27 Fixed CWE-347