open-vm-tools-12.1.5-1.el9.3.ML.1
エラータID: AXSA:2023-6439:10
リリース日:
2023/09/26 Tuesday - 06:37
題名:
open-vm-tools-12.1.5-1.el9.3.ML.1
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- open-vm-tools には、SAML トークン署名の検証処理を迂回できて
しまう問題があるため、近隣ネットワーク上の攻撃者により、不正
なゲスト OS の操作を可能とする脆弱性が存在します。
(CVE-2023-20900)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2023-20900
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
追加情報:
N/A
ダウンロード:
SRPMS
- open-vm-tools-12.1.5-1.el9.3.ML.1.src.rpm
MD5: a64926222aa7fab0cfc3dacdef55da88
SHA-256: 2290a09852993a5f8db567e9cdff22627521a35ec0b05905b031e9e3622dfdf5
Size: 4.14 MB
Asianux Server 9 for x86_64
- open-vm-tools-12.1.5-1.el9.3.ML.1.x86_64.rpm
MD5: eba05eb63b66736376d28cdf970c3acb
SHA-256: 0dc0e7155e9491c2ede98de75c4698adf56bd368c9f7410fed7fbb6a7cc1322f
Size: 851.02 kB - open-vm-tools-desktop-12.1.5-1.el9.3.ML.1.x86_64.rpm
MD5: c824e28a7d44c0a635cab8c07c918835
SHA-256: 3a6419e22bd7bc9342b3bfe3b17168ac1bd080e76a3a3fe6f619faae4898ea90
Size: 157.96 kB - open-vm-tools-salt-minion-12.1.5-1.el9.3.ML.1.x86_64.rpm
MD5: 5d2833342df2cde470301f750f1252ca
SHA-256: aa05e8b516a7ae8e6d15f1ed66f3e003fcadfe95816353eef0958f79ea6cb9db
Size: 22.02 kB - open-vm-tools-sdmp-12.1.5-1.el9.3.ML.1.x86_64.rpm
MD5: 81d538a666fb3e16aff99a6277074ee4
SHA-256: d0b6fdca729b4c0fd1590bf7a918b100efe10dfb2c770b70fc81c7b97493776f
Size: 23.91 kB - open-vm-tools-test-12.1.5-1.el9.3.ML.1.x86_64.rpm
MD5: ce973a2f193338dcb4d732e3acb01af7
SHA-256: b81edcaf1fc90bc00e34f55c7dfd55ad0cec125c25eaa8d73cd2302f450d35fd
Size: 15.70 kB
English