open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the 
/dev/uinput file descriptor allowing them to simulate user inputs.
            /dev/uinput file descriptor allowing them to simulate user inputs.
Metrics
Affected Vendors & Products
Advisories
    | Source | ID | Title | 
|---|---|---|
  Debian DLA | 
                DLA-3646-1 | open-vm-tools security update | 
  Debian DSA | 
                DSA-5543-1 | open-vm-tools security update | 
  EUVD | 
                EUVD-2023-38173 | open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs. | 
  Ubuntu USN | 
                USN-6463-1 | Open VM Tools vulnerabilities | 
  Ubuntu USN | 
                USN-6463-2 | Open VM Tools vulnerabilities | 
  Ubuntu USN | 
                USN-7714-1 | Open VM Tools vulnerabilities | 
Fixes
    Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
        History
                    Thu, 06 Mar 2025 16:15:00 +0000
| Type | Values Removed | Values Added | 
|---|---|---|
| Weaknesses | CWE-404 | |
| References | 
         | |
| Metrics | 
        
        ssvc
         
  | 
Status: PUBLISHED
Assigner: vmware
Published:
Updated: 2025-03-06T15:39:21.712Z
Reserved: 2023-05-25T17:21:56.204Z
Link: CVE-2023-34059
Updated: 2024-08-02T16:01:53.454Z
Status : Modified
Published: 2023-10-27T05:15:39.013
Modified: 2025-03-06T16:15:42.033
Link: CVE-2023-34059
                        OpenCVE Enrichment
                    No data.
 Debian DLA
 Debian DSA
 EUVD
 Ubuntu USN