PT-2023-8895 · Vmware+10 · Open-Vm-Tools+10
Matthias Gerstner
·
Publicado
2023-10-26
·
Atualizado
2025-08-24
·
CVE-2023-34059
CVSS v3.1
7.4
Alta
| Vetor | AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
open-vm-tools (affected versions not specified)
Description
The issue is related to a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs. This could potentially enable the attacker to bypass existing security restrictions.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Incorrect Privilege Assignment
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Open-Vm-Tools