High 1 exploited CVE DSA-5493-1 2 CVEs

open-vm-tools - security update

Published Sep 10, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 11	open-vm-tools	2:11.2.5-2+deb11u2
Debian · 12	open-vm-tools	2:12.2.0-1+deb12u1

Vulnerabilities 2

Low 3.9

CVE-2023-20867 Exploited EPSS 14%

VMware Tools Authentication Bypass Vulnerability

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

VMware VMware tools open-vm-tools open-vm-tools Debian Ubuntu Alpine

Jun 13, 2023
KEV Jun 23, 2023
High 7.1

CVE-2023-20900

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vspher…

open-vm-tools open-vm-tools open-vm-tools Debian Ubuntu Alpine

Aug 31, 2023