Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-34059

Опубликовано: 26 окт. 2023
Источник: redhat
CVSS3: 7.4
EPSS Низкий

Описание

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

A flaw was found in open-vm-tools. This flaw allows a malicious actor with non-root privileges to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs.

Дополнительная информация

Статус:

Important
Дефект:
CWE-266
https://bugzilla.redhat.com/show_bug.cgi?id=2246096open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

EPSS

Процентиль: 24%
0.00078
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
ubuntu
больше 1 года назад

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

CVSS3: 7.4
nvd
больше 1 года назад

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

CVSS3: 7
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 7.4
debian
больше 1 года назад

open-vm-tools contains a file descriptor hijack vulnerability in the v ...

CVSS3: 7.4
github
больше 1 года назад

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

EPSS

Процентиль: 24%
0.00078
Низкий

7.4 High

CVSS3