Summary
It was discovered that Open VM Tools incorrectly handled certain requests.
An attacker inside the guest could possibly use this issue to gain root
privileges inside the virtual machine.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | open-vm-tools | 2:11.0.5-4ubuntu0.18.04.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | open-vm-tools | 2:11.3.0-2ubuntu0~ubuntu20.04.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | open-vm-tools | 2:11.3.5-1ubuntu4.1 |
Vulnerabilities 1
-
Unscored —
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with lo…
References
-
report
https://ubuntu.com/security/CVE-2022-31676