PT-2017-6828 · Vmware+1 · Vmware Tools+1

Publicado 2017-03-15 · Atualizado 2024-06-15 · CVE-2015-5191

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Tools versions prior to 10.0.9

Description The issue is related to multiple file system races in libDeployPkg, which uses hard-coded paths under /tmp. This could potentially lead to a local privilege escalation if successfully exploited.

Recommendations For versions prior to 10.0.9, update to version 10.0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp directory to minimize the risk of exploitation.

Correção

LPE

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2015-5191

MGASA-2017-0354

OPENSUSE-SU-2024:10475-1

SUSE-SU-2017:0701-1

SUSE-SU-2017:0702-1

SUSE-SU-2017:0705-1

SUSE-SU-2017_0701-1

SUSE-SU-2017_0702-1

SUSE-SU-2017_0705-1

Produtos afetados

Suse

Vmware Tools

Referências · 42

• https://bugs.mageia.org/show_bug.cgi?id=20323 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2017-March/002697.html · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2017-March/002699.html · Nota
• https://advisories.mageia.org/MGASA-2017-0354.html · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2017:0702-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-5191 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2015-5191 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2017/suse-su-20170705-1 · Nota
• https://bugzilla.suse.com/985110 · Nota
• https://bugzilla.suse.com/971031 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0354 · Aviso do Fabricante
• https://bugzilla.suse.com/1013496 · Nota
• https://bugzilla.suse.com/952645 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:0701-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1007600 · Nota