Description
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | open-vm-tools | 2:9.4.6-1770165-7 | — |
| Debian 13 | open-vm-tools | 2:9.4.6-1770165-7 | — |
| Debian 12 | open-vm-tools | 2:9.4.6-1770165-7 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | open-vm-tools | 2:9.4.0-1280544-5ubuntu6.4+esm1 | USN-7714-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | open-vm-tools +2 | 9.10.2-4.el7 | RHBA-2015:2246 |
Advisories 2
- RHBA-2015:2246 Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- USN-7714-1 open-vm-tools vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
References
- 20140826 VMware vm-support multiple vulnerabilities mailing-list
- vmware-support-cve20144199-dos(95493) vdb-entry
- 110458 vdb-entry
- 1030758 vdb-entry