Skip to content
OpenAdvisories
Low · 3.9 Known exploited CVE-2023-20867 EUVD-2023-25040GHSA-qm59-f7vh-3m2p

VMware Tools Authentication Bypass Vulnerability

Published Jun 13, 2023 · Updated Oct 21, 2025 · Assigned by vmware

Vendor: VMware Product: VMware tools Package: open-vm-tools Package: open-vm-tools Package: open-vm-tools Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Affected products

VendorProductAffectedFixed
VMware VMware Tools — 12.2.5

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 open-vm-tools 2:12.2.5-1 —
Debian 13 open-vm-tools 2:12.2.5-1 —
Debian 12 open-vm-tools 2:12.2.0-1+deb12u1 DSA-5493-1
Debian 11 open-vm-tools 2:11.2.5-2+deb11u2 DSA-5493-1
Debian 10 open-vm-tools 2:10.3.10-1+deb10u4 DLA-3531-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS open-vm-tools 2:12.1.5-3~ubuntu0.22.04.2 USN-6257-1
Ubuntu 20.04 LTS open-vm-tools 2:11.3.0-2ubuntu0~ubuntu20.04.5 USN-6257-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS open-vm-tools 2:11.0.5-4ubuntu0.18.04.3+esm1 USN-6257-1
Ubuntu Pro 16.04 LTS open-vm-tools 2:10.2.0-3~ubuntu0.16.04.1+esm2 USN-6257-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 open-vm-tools +4 12.1.5-1.el9_2.1 RHSA-2023:3948
RHEL 8 open-vm-tools +3 12.1.5-2.el8_8 RHSA-2023:3949
RHEL 7 open-vm-tools +3 11.0.5-3.el7_9.6 RHSA-2023:3944
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.0 EUS open-vm-tools +3 11.3.5-1.el9_0.2 RHSA-2023:3947
RHEL 8.6 EUS open-vm-tools +2 11.3.5-1.el8_6.2 RHSA-2023:3950
RHEL 8.4 TUS open-vm-tools +2 11.2.0-2.el8_4.2 RHSA-2023:3946
RHEL 8.4 E4S open-vm-tools +2 11.2.0-2.el8_4.2 RHSA-2023:3946
RHEL 8.4 AUS open-vm-tools +2 11.2.0-2.el8_4.2 RHSA-2023:3946
RHEL 8.2 TUS open-vm-tools +1 11.0.0-4.el8_2.2 RHSA-2023:3945
RHEL 8.2 E4S open-vm-tools +1 11.0.0-4.el8_2.2 RHSA-2023:3945
RHEL 8.2 AUS open-vm-tools +1 11.0.0-4.el8_2.2 RHSA-2023:3945

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 open-vm-tools +4 12.1.5-1.el9_2.1.alma ALSA-2023:3948
AlmaLinux 8 open-vm-tools +3 12.1.5-2.el8_8.alma ALSA-2023:3949

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 open-vm-tools 12.1.5-1.el9_2.1 RLSA-2023:3948
Rocky Linux 8 open-vm-tools 12.1.5-2.el8_8 RLSA-2023:3949

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLES 15 SP4 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLES 15 SP3 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-2
SLES 15 SP2 open-vm-tools 11.3.5-150200.5.16.16.1 SUSE-SU-2023:3505-1
SLES 15 SP1 open-vm-tools 11.3.5-150100.4.37.18.1 SUSE-SU-2023:3504-1
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 open-vm-tools 12.2.0-4.53.1 SUSE-SU-2023:2530-1
SLES for SAP 15 SP3 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-2
SLES for SAP 15 SP2 open-vm-tools 11.3.5-150200.5.16.16.1 SUSE-SU-2023:3505-1
SLES for SAP 15 SP1 open-vm-tools 11.3.5-150100.4.37.18.1 SUSE-SU-2023:3504-1
SLES for SAP 12 SP5 open-vm-tools 12.2.0-4.53.1 SUSE-SU-2023:2530-1
SLE Real Time 15 SP3 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLE Micro 5.4 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLE Micro 5.3 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLE Micro 5.2 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLE Micro 5.1 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
SLE HPC 15 SP3 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-2
SLE HPC 15 SP2 open-vm-tools 11.3.5-150200.5.16.16.1 SUSE-SU-2023:3505-1
SLE HPC 15 SP1 open-vm-tools 11.3.5-150100.4.37.18.1 SUSE-SU-2023:3504-1
SUSE Manager Server 4.2 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-2
SUSE Manager Proxy 4.2 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-2
SUSE Enterprise Storage 7.1 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-2
SUSE Enterprise Storage 7 open-vm-tools 11.3.5-150200.5.16.16.1 SUSE-SU-2023:3505-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed open-vm-tools 12.2.0-4.1 openSUSE-SU-2024:13022-1
openSUSE Leap 15.5 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
openSUSE Leap 15.4 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.3 open-vm-tools 12.2.0-150300.29.1 SUSE-SU-2023:2604-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 open-vm-tools 12.2.5-r0 —
Alpine v3.23 open-vm-tools 12.2.5-r0 —
Alpine v3.22 open-vm-tools 12.2.5-r0 —
Alpine v3.21 open-vm-tools 12.2.5-r0 —
Alpine v3.20 open-vm-tools 12.2.5-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 open-vm-tools 12.2.5-r0 —
Alpine v3.18 open-vm-tools 12.2.5-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 open-vm-tools +5 12.2.5-1.amzn2023 ALAS2023-2023-259
Amazon Linux 2 open-vm-tools +5 12.2.5-1.amzn2 ALAS2-2023-2139

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 open-vm-tools +4 12.1.5-1.0.2.el9 ELSA-2023-3948
Oracle Linux 8 open-vm-tools +3 12.1.5-1.0.2.el8 ELSA-2023-3949
Oracle Linux 7 open-vm-tools +3 11.0.5-3.0.1.el7_9.6 ELSA-2023-3944

Advisories 27

References