open-vm-tools-12.3.5-2.el9
エラータID: AXBA:2024-8096:03
リリース日:
2024/05/31 Friday - 21:15
題名:
open-vm-tools-12.3.5-2.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
N/A
解決策:
Update packages.
CVE:
CVE-2023-34058
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
CVE-2023-34059
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
追加情報:
N/A
ダウンロード:
SRPMS
- open-vm-tools-12.3.5-2.el9.src.rpm
MD5: 72040e319de2583f0cbd9f340d624a47
SHA-256: adeadad02e057293e9e555ae25123a7443bc5ae59807fe88d1d6483919527762
Size: 4.15 MB
Asianux Server 9 for x86_64
- open-vm-tools-12.3.5-2.el9.x86_64.rpm
MD5: 45eea214d8ef031d6bf9739376575253
SHA-256: b399fcc8a97aa04e1adabefb2f89163f8ffb4c9559df36731eac581e91b1e5ec
Size: 885.42 kB - open-vm-tools-desktop-12.3.5-2.el9.x86_64.rpm
MD5: 55e0fb0acc6be1fcbfc9fe9a3f3e7bce
SHA-256: f56698063503757ac3e2f742a6dfa25abdce312ac00c26f5a4c2094e644d681a
Size: 159.41 kB - open-vm-tools-salt-minion-12.3.5-2.el9.x86_64.rpm
MD5: c958b028b5fa1ee2ac086dc44254ea1e
SHA-256: a41d2e1023e95eedc7f6ec1e3614b0125db9130fa9dd3783df0e7496c4791d11
Size: 25.48 kB - open-vm-tools-sdmp-12.3.5-2.el9.x86_64.rpm
MD5: b98dc1ef50f7c2cc72387a9b8afc7023
SHA-256: d6b1f7351bdf316f110649b6765d3e991d3e21613b7affa15d50146bd7a55cdd
Size: 25.25 kB - open-vm-tools-test-12.3.5-2.el9.x86_64.rpm
MD5: 58d44601f791fb6f63a83b734c1275f5
SHA-256: 598f10a64787865a810edfb665f74166bcc17c2b050b461e14eb53bc7f13d2a9
Size: 17.08 kB