Low 1 exploited CVE ELSA-2023-3948 1 CVE

Low: open-vm-tools security update (Oracle Linux 9)

Published Jul 7, 2023 · Updated Jul 7, 2023

Ecosystem: Oracle Linux

Summary

[12.1.5-1.0.2]
- [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 9	open-vm-tools	0:12.1.5-1.0.2.el9
Oracle Linux · 9	open-vm-tools-desktop	0:12.1.5-1.0.2.el9
Oracle Linux · 9	open-vm-tools-salt-minion	0:12.1.5-1.0.2.el9
Oracle Linux · 9	open-vm-tools-sdmp	0:12.1.5-1.0.2.el9
Oracle Linux · 9	open-vm-tools-test	0:12.1.5-1.0.2.el9

Vulnerabilities 1

Low 3.9

CVE-2023-20867 Exploited EPSS 14%

VMware Tools Authentication Bypass Vulnerability

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

VMware VMware tools open-vm-tools open-vm-tools Debian Ubuntu Alpine

Jun 13, 2023
KEV Jun 23, 2023