Low 1 exploited CVE ELSA-2023-3949 1 CVE

Low: open-vm-tools security update (Oracle Linux 8)

Published Jul 7, 2023 · Updated Jul 7, 2023

Ecosystem: Oracle Linux

Summary

[12.1.5-1.0.2]
- [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	open-vm-tools	0:12.1.5-1.0.2.el8
Oracle Linux · 8	open-vm-tools-desktop	0:12.1.5-1.0.2.el8
Oracle Linux · 8	open-vm-tools-salt-minion	0:12.1.5-1.0.2.el8
Oracle Linux · 8	open-vm-tools-sdmp	0:12.1.5-1.0.2.el8

Vulnerabilities 1

Low 3.9

CVE-2023-20867 Exploited EPSS 14%

VMware Tools Authentication Bypass Vulnerability

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

VMware VMware tools open-vm-tools open-vm-tools Debian Ubuntu Alpine

Jun 13, 2023
KEV Jun 23, 2023