Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03434-1

Опубликовано: 30 сент. 2025
Источник: suse-cvrf

Описание

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).

Список пакетов

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
libvmtools0-13.0.0-150600.3.18.1
open-vm-tools-13.0.0-150600.3.18.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
libvmtools0-13.0.0-150600.3.18.1
open-vm-tools-13.0.0-150600.3.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
libvmtools-devel-13.0.0-150600.3.18.1
libvmtools0-13.0.0-150600.3.18.1
open-vm-tools-13.0.0-150600.3.18.1
open-vm-tools-salt-minion-13.0.0-150600.3.18.1
open-vm-tools-sdmp-13.0.0-150600.3.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libvmtools-devel-13.0.0-150600.3.18.1
libvmtools0-13.0.0-150600.3.18.1
open-vm-tools-13.0.0-150600.3.18.1
open-vm-tools-salt-minion-13.0.0-150600.3.18.1
open-vm-tools-sdmp-13.0.0-150600.3.18.1
SUSE Linux Enterprise Module for Containers 15 SP6
open-vm-tools-containerinfo-13.0.0-150600.3.18.1
SUSE Linux Enterprise Module for Containers 15 SP7
open-vm-tools-containerinfo-13.0.0-150600.3.18.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6
open-vm-tools-desktop-13.0.0-150600.3.18.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
open-vm-tools-desktop-13.0.0-150600.3.18.1
openSUSE Leap 15.6
libvmtools-devel-13.0.0-150600.3.18.1
libvmtools0-13.0.0-150600.3.18.1
open-vm-tools-13.0.0-150600.3.18.1
open-vm-tools-containerinfo-13.0.0-150600.3.18.1
open-vm-tools-desktop-13.0.0-150600.3.18.1
open-vm-tools-salt-minion-13.0.0-150600.3.18.1
open-vm-tools-sdmp-13.0.0-150600.3.18.1

Ссылки

Описание

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Затронутые продукты
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud:libvmtools0-13.0.0-150600.3.18.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud:open-vm-tools-13.0.0-150600.3.18.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud:libvmtools0-13.0.0-150600.3.18.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud:open-vm-tools-13.0.0-150600.3.18.1
Ссылки