Описание
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 2:12.3.5-1 |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra/bionic | released | 2:11.0.5-4ubuntu0.18.04.3+esm3 |
| esm-infra/focal | not-affected | 2:11.3.0-2ubuntu0~ubuntu20.04.7 |
| esm-infra/xenial | released | 2:10.2.0-3~ubuntu0.16.04.1+esm4 |
| focal | released | 2:11.3.0-2ubuntu0~ubuntu20.04.7 |
| jammy | released | 2:12.1.5-3~ubuntu0.22.04.4 |
| lunar | released | 2:12.1.5-3ubuntu0.23.04.3 |
| mantic | released | 2:12.3.0-1ubuntu0.1 |
Показывать по
EPSS
7.4 High
CVSS3
Связанные уязвимости
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
open-vm-tools contains a file descriptor hijack vulnerability in the v ...
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
EPSS
7.4 High
CVSS3