CyberSecBulletin

Open-vm-tools vulnerabilities

We track 2 vulnerabilities in Open-vm-tools products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2023.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Open-vm-tools vulnerabilities

  • 7.0 High severity

    open-vm-tools: Improper Resource Shutdown or Release

    CVE-2023-34059Open-vm-tools

    open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

  • 7.5 High severity

    VMware Tools: Improper Verification of Cryptographic Signature

    CVE-2023-34058VMware Tools

    VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virt