Red Hat Security AdvisoryRHSA-2023:7279
open-vm-tools security update
Released 2023-11-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) open-vm-tools-11.0.5-3.el7_9.9, open-vm-tools-desktop-11.0.5-3.el7_9.9
- Red Hat Enterprise Linux Client Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.9, open-vm-tools-test-11.0.5-3.el7_9.9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.9, open-vm-tools-test-11.0.5-3.el7_9.9
- Red Hat Enterprise Linux Server (v. 7) open-vm-tools-11.0.5-3.el7_9.9, open-vm-tools-desktop-11.0.5-3.el7_9.9
- Red Hat Enterprise Linux Server Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.9, open-vm-tools-test-11.0.5-3.el7_9.9
- Red Hat Enterprise Linux Workstation (v. 7) open-vm-tools-11.0.5-3.el7_9.9, open-vm-tools-desktop-11.0.5-3.el7_9.9
- Red Hat Enterprise Linux Workstation Optional (v. 7) open-vm-tools-devel-11.0.5-3.el7_9.9, open-vm-tools-test-11.0.5-3.el7_9.9
Fixes 2 records
Priority HIGH 68
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00396 · Published 2023-10-27 · Fixed CWE-404
Priority LOW 36
VMware Tools contains a SAML token signature bypass vulnerability.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00813 · Published 2023-10-27 · Fixed CWE-347