open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the
/dev/uinput file descriptor allowing them to simulate user inputs.
/dev/uinput file descriptor allowing them to simulate user inputs.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3646-1 | open-vm-tools security update |
Debian DSA |
DSA-5543-1 | open-vm-tools security update |
EUVD |
EUVD-2023-38173 | open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs. |
Ubuntu USN |
USN-6463-1 | Open VM Tools vulnerabilities |
Ubuntu USN |
USN-6463-2 | Open VM Tools vulnerabilities |
Ubuntu USN |
USN-7714-1 | Open VM Tools vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 06 Mar 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-404 | |
| References |
| |
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: vmware
Published:
Updated: 2025-03-06T15:39:21.712Z
Reserved: 2023-05-25T17:21:56.204Z
Link: CVE-2023-34059
Updated: 2024-08-02T16:01:53.454Z
Status : Modified
Published: 2023-10-27T05:15:39.013
Modified: 2025-03-06T16:15:42.033
Link: CVE-2023-34059
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD
Ubuntu USN