Debian/open-vm-tools: high 7
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing
Action: Upgrade open-vm-tools to 2:12.3.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:12.3.5-1 | - |
Fixed versions
| 2:12.3.5-1 |
Sources
- osv: DEBIAN-CVE-2023-34059#Debian:14/open-vm-tools
- https://security-tracker.debian.org/tracker/CVE-2023-34059
published · modified · JSON