Description
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
VMware VMware Tools
Default version status: unaffected
12.2.5unaffected
References
- https://www.vmware.com/security/advisories/VMSA-2023-0013.html ↗
- https://security.netapp.com/advisory/ntap-20230725-0001/ ↗
- https://lists.debian.org/debian-lts-announce/2023/08/msg00020.html ↗
- https://www.debian.org/security/2023/dsa-5493 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W/ ↗
- http://www.openwall.com/lists/oss-security/2023/10/16/2 ↗
- http://www.openwall.com/lists/oss-security/2023/10/16/11 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20867 ↗