Most recent entries from all

ALSA-2022:6357 — Important: open-vm-tools security update

Affected: AlmaLinux:8: open-vm-tools, AlmaLinux:8: open-vm-tools-desktop, AlmaLinux:8: open-vm-tools-sdmp

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

* open-vm-tools: local root privilege escalation in the virtual machine (CVE-2022-31676)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-05274

certfr-2022-avi-763 — Une vulnérabilité a été découverte dans VMware Tools. Elle permet à un attaquant de provoquer une élévation de privilèg…

certfr-2022-avi-763

EUVD-2026-17011

fkie_cve-2022-31676

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

GHSA-whrm-jv67-hw75

gsd-2022-31676

ICSA-24-102-04 — Siemens RUGGEDCOM APE1808

The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string. PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. Applications using NSS for certificate validat…

openSUSE-SU-2024:12288-1 — libvmtools-devel-12.1.0-1.1 on GA media

libvmtools-devel-12.1.0-1.1 on GA media

RHSA-2022:6354 — Red Hat Security Advisory: open-vm-tools security update

open-vm-tools: local root privilege escalation in the virtual machine

SUSE-SU-2022:2935-1 — Security update for open-vm-tools

Security update for open-vm-tools

UBUNTU-CVE-2022-31676

Affected: Ubuntu:Pro:16.04:LTS: open-vm-tools, Ubuntu:18.04:LTS: open-vm-tools, Ubuntu:20.04:LTS: open-vm-tools, Ubuntu:22.04:LTS: open-vm-tools

WID-SEC-W-2022-1159 — VMware Tools: Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in VMware Tools ausnutzen, um seine Privilegien zu erhöhen.