tocsin

Debian/open-vm-tools: high 7

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing

Action: Upgrade open-vm-tools to 2:12.2.0-1+deb12u2 or later.

Affected

introducedfixedlast affected
02:12.2.0-1+deb12u2-

Fixed versions

2:12.2.0-1+deb12u2

Sources

published · modified · JSON