PT-2020-3045 · Vmware · Vmware Tools

Published 2020-01-15 · Updated 2020-02-05 · CVE-2020-3941

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Tools versions prior to 11.x.y

Description The issue is related to a race condition in the repair operation of VMware Tools for Windows, which may allow for privilege escalation in the Virtual Machine where Tools is installed. This is due to synchronization errors when using a shared resource.

Recommendations For versions prior to 11.x.y, consider updating to version 11.x.y or later, as the affected functionality is not present in these versions, thus mitigating the risk of privilege escalation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2020-03334

CVE-2020-3941

Affected Products

Vmware Tools

References · 4

• https://vmware.com/security/advisories/VMSA-2020-0002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3941 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03334 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3941 · Security Note