Branch c9f2 update bulletin.

Package open-vm-tools updated to version 12.1.0-alt0.c9.1 for branch c9f2 in task 306079.

Published: 2022-03-01

BDU:2022-02316

Уязвимость набора утилит VMware Tools для операционных систем Windows, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю выполнить произвольный код с системными привилегиями

Severity: HIGH (7.2) Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-08-23

BDU:2022-05274

Уязвимость набора утилит VMware Tools, связанная с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.0) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-03-04
Modified: 2024-11-21

CVE-2022-22943

VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.

Severity: MEDIUM (6.7) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-08-23
Modified: 2024-11-21

CVE-2022-31676

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Branch c9f2 update on 2022-09-08

ALT-BU-2022-6055-1

ALT-PU-2022-2579-1

Closed vulnerabilities

BDU:2022-02316

BDU:2022-05274

CVE-2022-22943

CVE-2022-31676