Package open-vm-tools updated to version 13.0.5-alt0.c9f2.1 for branch c9f2 in task 401674.

Published: 2025-05-19
Modified: 2025-11-26

BDU:2025-05681

Уязвимость набора утилит VMware Tools, связанная с неверным определением ссылки перед доступом к файлу, позволяющая нарушителю повысить свои привилегии

Severity: MEDIUM (6.1) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Severity: MEDIUM (5.2) Vector: AV:L/AC:L/Au:S/C:P/I:C/A:N

References:

Published: 2025-10-01
Modified: 2025-12-26

BDU:2025-12421

Уязвимость функции Service Discovery Management Pack (SDMP) инструмента мониторинга виртуальной инфраструктуры VMware Aria Operations и набора утилит VMware Tools, позволяющая нарушителю повысить свои привилегии до уровня root

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: MEDIUM (6.8) Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

References:

Published: 2025-05-12
Modified: 2025-11-18

CVE-2025-22247

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

References:

Published: 2025-09-29
Modified: 2025-11-06

CVE-2025-41244

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Зависимость от java

Version: 2.1.2

Package open-vm-tools update in c9f2 on 2025-12-09

ALT-PU-2025-15308-4

Closed vulnerabilities

BDU:2025-05681

BDU:2025-12421

CVE-2025-22247

CVE-2025-41244

Closed bugs

Bug #50869