CVE-2023-34058
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.1
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
CVE-2023-34058- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-347
- Updated
- 2026-11-02
EUVDEUVD-2023-38172
7.1
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
EUVD-2023-38172- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h5hf-5wcj-6hmf
7.5
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
GHSA-h5hf-5wcj-6hmf- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-347
- Updated
- 2026-11-02
NVD
7.1
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
CVE-2023-34058- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-347
- Updated
- 2026-11-02
OSVAZL-31718
7.5
CVE-2023-34058 affecting package open-vm-tools for versions less than 11.3.0-3
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
AZL-31718- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
7.1
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
CVE-2023-34058- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 27 moreShow less
OSVDEBIAN-CVE-2023-34058
7.5
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
DEBIAN-CVE-2023-34058- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1831
7.5
open-vm-tools security update
The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .
Security Fix(es):
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-34058)
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.(CVE-2023-34059)
- Record
OESA-2023-1831- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1832
7.5
open-vm-tools security update
The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .
Security Fix(es):
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-34058)
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.(CVE-2023-34059)
- Record
OESA-2023-1832- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1833
7.5
open-vm-tools security update
The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .
Security Fix(es):
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-34058)
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.(CVE-2023-34059)
- Record
OESA-2023-1833- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7260
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7260- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7261
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7261- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7262
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7262- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7263
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7263- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7264
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7264- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7265
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7265- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7267
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7267- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7276
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7276- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7277
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7277- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7279
7.5
Red Hat Security Advisory: open-vm-tools security update
- Record
RHSA-2023:7279- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-34058
7.1
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
- Record
UBUNTU-CVE-2023-34058- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2023:7265 No score
Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.
Security Fix(es):
- open-vm-tools: SAML token signature bypass (CVE-2023-34058)
- open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:7265- Updated
- 2026-11-02
OSVALSA-2023:7277 No score
Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.
Security Fix(es):
- open-vm-tools: SAML token signature bypass (CVE-2023-34058)
- open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:7277- Updated
- 2026-11-02
OSVCLSA-2025-1750444475 No score
open-vm-tools: Fix of 2 CVEs
- CVE-2023-34058: don't accept tokens with unrelated certs
- CVE-2023-34059: fix file descriptor vuln by moving privilege drop from suidWrapper to vmtoolsd
- Record
CLSA-2025-1750444475- Updated
- 2026-11-02
OSVMGASA-2024-0058 No score
Updated open-vm-tools packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Authentication bypass vulnerability in the vgauth module. (CVE-2023-20867) SAML token signature bypass. (CVE-2023-34058) File descriptor hijack vulnerability in the vmware-user-suid-wrapper. (CVE-2023-34059)
- Record
MGASA-2024-0058- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13374-1 No score
libvmtools-devel-12.3.0-5.1 on GA media
These are all security issues fixed in the libvmtools-devel-12.3.0-5.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13374-1- Updated
- 2026-11-02
OSVRLSA-2023:7265 No score
Important: open-vm-tools security update
The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.
Security Fix(es):
-
open-vm-tools: SAML token signature bypass (CVE-2023-34058)
-
open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:7265- Updated
- 2026-11-02
OSVSUSE-SU-2023:4227-1 No score
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues:
- CVE-2023-34058: Fixed a SAML token signature bypass issue (bsc#1216432).
- CVE-2023-34059: Fixed a privilege escalation issue through vmware-user-suid-wrapper (bsc#1216433).
- Record
SUSE-SU-2023:4227-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4228-1 No score
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues:
- CVE-2023-34058: Fixed a SAML token signature bypass issue (bsc#1216432).
- CVE-2023-34059: Fixed a privilege escalation issue through vmware-user-suid-wrapper (bsc#1216433).
- Record
SUSE-SU-2023:4228-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4229-1 No score
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues:
- CVE-2023-34058: Fixed a SAML token signature bypass issue (bsc#1216432).
- CVE-2023-34059: Fixed a privilege escalation issue through vmware-user-suid-wrapper (bsc#1216433).
- Record
SUSE-SU-2023:4229-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4230-1 No score
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues:
- CVE-2023-34058: Fixed a SAML token signature bypass issue (bsc#1216432).
- CVE-2023-34059: Fixed a privilege escalation issue through vmware-user-suid-wrapper (bsc#1216433).
- Record
SUSE-SU-2023:4230-1- Updated
- 2026-11-02
OSVUSN-6463-1 No score
open-vm-tools vulnerabilities
It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker Guest Operations privileges could possibly use this issue to escalate privileges. (CVE-2023-34058)
Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059)
- Record
USN-6463-1- Updated
- 2026-11-02
OSVUSN-6463-2 No score
open-vm-tools vulnerabilities
USN-6463-1 fixed vulnerabilities in Open VM Tools. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker with Guest Operations privileges could possibly use this issue to elevate their privileges. (CVE-2023-34058)
Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059)
- Record
USN-6463-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
open-vm-toolsAlmaLinux:8 From an advisory covering 2 CVEs |
before 12.2.5-3.el8_9.1.alma.1 | 12.2.5-3.el8_9.1.alma.1 |
open-vm-tools-desktopAlmaLinux:8 From an advisory covering 2 CVEs |
before 12.2.5-3.el8_9.1.alma.1 | 12.2.5-3.el8_9.1.alma.1 |
open-vm-tools-salt-minionAlmaLinux:8 From an advisory covering 2 CVEs |
before 12.2.5-3.el8_9.1.alma.1 | 12.2.5-3.el8_9.1.alma.1 |
open-vm-tools-sdmpAlmaLinux:8 From an advisory covering 2 CVEs |
before 12.2.5-3.el8_9.1.alma.1 | 12.2.5-3.el8_9.1.alma.1 |
open-vm-toolsAlmaLinux:9 From an advisory covering 2 CVEs |
before 12.2.5-3.el9_3.2.alma.1 | 12.2.5-3.el9_3.2.alma.1 |
open-vm-tools-desktopAlmaLinux:9 From an advisory covering 2 CVEs |
before 12.2.5-3.el9_3.2.alma.1 | 12.2.5-3.el9_3.2.alma.1 |
open-vm-tools-salt-minionAlmaLinux:9 From an advisory covering 2 CVEs |
before 12.2.5-3.el9_3.2.alma.1 | 12.2.5-3.el9_3.2.alma.1 |
open-vm-tools-sdmpAlmaLinux:9 From an advisory covering 2 CVEs |
before 12.2.5-3.el9_3.2.alma.1 | 12.2.5-3.el9_3.2.alma.1 |
open-vm-tools-testAlmaLinux:9 From an advisory covering 2 CVEs |
before 12.2.5-3.el9_3.2.alma.1 | 12.2.5-3.el9_3.2.alma.1 |
open-vm-toolsAzure Linux:2 |
before 11.3.0-3 | 11.3.0-3 |
Show 175 moreShow less
| Package | Affected | Fixed |
|---|---|---|
open-vm-toolsTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 12.1.5-1.el9.3.alma.1.tuxcare.els1 | 12.1.5-1.el9.3.alma.1.tuxcare.els1 |
open-vm-tools-desktopTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 12.1.5-1.el9.3.alma.1.tuxcare.els1 | 12.1.5-1.el9.3.alma.1.tuxcare.els1 |
open-vm-tools-develTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 12.1.5-1.el9.3.alma.1.tuxcare.els1 | 12.1.5-1.el9.3.alma.1.tuxcare.els1 |
open-vm-tools-salt-minionTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 12.1.5-1.el9.3.alma.1.tuxcare.els1 | 12.1.5-1.el9.3.alma.1.tuxcare.els1 |
open-vm-tools-sdmpTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 12.1.5-1.el9.3.alma.1.tuxcare.els1 | 12.1.5-1.el9.3.alma.1.tuxcare.els1 |
open-vm-tools-testTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 12.1.5-1.el9.3.alma.1.tuxcare.els1 | 12.1.5-1.el9.3.alma.1.tuxcare.els1 |
open-vm-toolsDebian:12 |
before 2:12.2.0-1+deb12u2, plus listed versions 2:12.2.0-12:12.2.0-1+deb12u12:12.2.0-1+deb12u1~bpo11+12:12.2.0-1+deb12u2~bpo10+12:12.2.0-1+deb12u2~bpo11+1 |
2:12.2.0-1+deb12u2 |
open-vm-toolsDebian:13 |
before 2:12.3.5-1 | 2:12.3.5-1 |
open-vm-toolsDebian:14 |
before 2:12.3.5-1 | 2:12.3.5-1 |
open-vm-toolsDebian:10 From an advisory covering 2 CVEs |
before 2:10.3.10-1+deb10u6, plus listed versions 2:10.3.10-12:10.3.10-1+deb10u12:10.3.10-1+deb10u22:10.3.10-1+deb10u2~bpo9+12:10.3.10-1+deb10u32:10.3.10-1+deb10u42:10.3.10-1+deb10u5 |
2:10.3.10-1+deb10u6 |
open-vm-toolsDebian:11 From an advisory covering 2 CVEs |
before 2:11.2.5-2+deb11u3, plus listed versions 2:11.2.5-22:11.2.5-2+deb11u12:11.2.5-2+deb11u22:11.2.5-2+deb11u3~bpo10+1 |
2:11.2.5-2+deb11u3 |
open-vm-toolsDebian:12 From an advisory covering 2 CVEs |
before 2:12.2.0-1+deb12u2, plus listed versions 2:12.2.0-12:12.2.0-1+deb12u12:12.2.0-1+deb12u1~bpo11+12:12.2.0-1+deb12u2~bpo10+12:12.2.0-1+deb12u2~bpo11+1 |
2:12.2.0-1+deb12u2 |
open-vm-toolsMageia:9 From an advisory covering 3 CVEs |
before 12.3.5-2.mga9 | 12.3.5-2.mga9 |
open-vm-toolsopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 12.0.5-4.oe2203 | 12.0.5-4.oe2203 |
open-vm-toolsopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 12.0.5-4.oe2203sp1 | 12.0.5-4.oe2203sp1 |
open-vm-toolsopenEuler:22.03-LTS-SP2 From an advisory covering 2 CVEs |
before 12.1.5-3.oe2203sp2 | 12.1.5-3.oe2203sp2 |
open-vm-toolsRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:10.3.10-3.el8_1.5 | 0:10.3.10-3.el8_1.5 |
open-vm-tools-debuginfoRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:10.3.10-3.el8_1.5 | 0:10.3.10-3.el8_1.5 |
open-vm-tools-debugsourceRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:10.3.10-3.el8_1.5 | 0:10.3.10-3.el8_1.5 |
open-vm-tools-desktopRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:10.3.10-3.el8_1.5 | 0:10.3.10-3.el8_1.5 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:10.3.10-3.el8_1.5 | 0:10.3.10-3.el8_1.5 |
open-vm-tools-test-debuginfoRed Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs |
before 0:10.3.10-3.el8_1.5 | 0:10.3.10-3.el8_1.5 |
open-vm-toolsRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-desktopRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-toolsRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-debugsourceRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-desktopRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-toolsRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-debugsourceRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-desktopRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs |
before 0:11.0.0-4.el8_2.4 | 0:11.0.0-4.el8_2.4 |
open-vm-toolsRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-desktopRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-sdmpRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-toolsRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-debugsourceRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-desktopRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-sdmpRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-toolsRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-debugsourceRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-desktopRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-sdmpRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs |
before 0:11.2.0-2.el8_4.4 | 0:11.2.0-2.el8_4.4 |
open-vm-toolsRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-debugsourceRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-desktopRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-sdmpRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-tools-test-debuginfoRed Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el8_6.5 | 0:11.3.5-1.el8_6.5 |
open-vm-toolsRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-desktopRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-salt-minionRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-sdmpRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-2.el8_8.4 | 0:12.1.5-2.el8_8.4 |
open-vm-toolsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-desktopRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-desktop-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-salt-minionRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-sdmpRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-sdmp-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-tools-test-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-toolsRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-debugsourceRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-desktopRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-sdmpRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-testRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-tools-test-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs |
before 0:11.3.5-1.el9_0.5 | 0:11.3.5-1.el9_0.5 |
open-vm-toolsRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-debugsourceRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-desktopRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-desktop-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-salt-minionRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-sdmpRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-sdmp-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-testRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-tools-test-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:12.1.5-1.el9_2.4 | 0:12.1.5-1.el9_2.4 |
open-vm-toolsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-desktopRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-desktop-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-salt-minionRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-sdmpRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-sdmp-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-testRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-tools-test-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:12.2.5-3.el9_3.2 | 0:12.2.5-3.el9_3.2 |
open-vm-toolsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-desktopRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-testRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-testRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-toolsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-desktopRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-testRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-desktopRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-tools-testRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:11.0.5-3.el7_9.9 | 0:11.0.5-3.el7_9.9 |
open-vm-toolsRocky Linux:8 From an advisory covering 2 CVEs |
before 0:12.2.5-3.el8_9.1 | 0:12.2.5-3.el8_9.1 |
open-vm-toolsSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Manager Proxy 4.2 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Manager Server 4.2 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Micro 5.1 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsopenSUSE:Leap Micro 5.3 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsopenSUSE:Leap Micro 5.4 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsopenSUSE:Leap 15.5 From an advisory covering 2 CVEs |
before 12.3.0-150300.43.1 | 12.3.0-150300.43.1 |
open-vm-toolsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 12.3.0-4.62.1 | 12.3.0-4.62.1 |
open-vm-toolsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 12.3.0-4.62.1 | 12.3.0-4.62.1 |
open-vm-toolsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 11.3.5-150200.5.16.19.1 | 11.3.5-150200.5.16.19.1 |
open-vm-toolsSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 11.3.5-150200.5.16.19.1 | 11.3.5-150200.5.16.19.1 |
open-vm-toolsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 11.3.5-150200.5.16.19.1 | 11.3.5-150200.5.16.19.1 |
open-vm-toolsSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 11.3.5-150100.4.37.21.1 | 11.3.5-150100.4.37.21.1 |
open-vm-toolsSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 11.3.5-150100.4.37.21.1 | 11.3.5-150100.4.37.21.1 |
open-vm-toolsSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 11.3.5-150100.4.37.21.1 | 11.3.5-150100.4.37.21.1 |
open-vm-toolsUbuntu:Pro:16.04:LTS |
before 2:10.2.0-3~ubuntu0.16.04.1+esm4, plus listed versions 2:9.10.2-2822639-1ubuntu32:10.0.0-3000743-3ubuntu12:10.0.7-3227872-2ubuntu12:10.0.7-3227872-5ubuntu1~16.04.12:10.0.7-3227872-5ubuntu1~16.04.2 Show 4 moreShow less2:10.2.0-3~ubuntu0.16.04.12:10.2.0-3~ubuntu0.16.04.1+esm12:10.2.0-3~ubuntu0.16.04.1+esm22:10.2.0-3~ubuntu0.16.04.1+esm3 |
2:10.2.0-3~ubuntu0.16.04.1+esm4 |
open-vm-toolsUbuntu:Pro:18.04:LTS |
before 2:11.0.5-4ubuntu0.18.04.3+esm3, plus listed versions 2:10.1.10-32:10.1.10-3build12:10.1.15-12:10.1.15-1build12:10.2.0-2 Show 16 moreShow less2:10.2.0-2build12:10.2.0-32:10.2.0-3ubuntu12:10.2.0-3ubuntu22:10.2.0-3ubuntu32:10.3.0-0ubuntu1~18.04.12:10.3.0-0ubuntu1~18.04.22:10.3.0-0ubuntu1~18.04.32:10.3.5-7~ubuntu0.18.04.12:10.3.10-1~ubuntu0.18.04.12:11.0.1-2ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.12:11.0.5-4ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.32:11.0.5-4ubuntu0.18.04.3+esm12:11.0.5-4ubuntu0.18.04.3+esm2 |
2:11.0.5-4ubuntu0.18.04.3+esm3 |
open-vm-toolsUbuntu:20.04:LTS |
before 2:11.3.0-2ubuntu0~ubuntu20.04.7, plus listed versions 2:10.3.10-3ubuntu12:11.0.1-22:11.0.1-32:11.0.1-3ubuntu12:11.0.1-4 Show 13 moreShow less2:11.0.5-12:11.0.5-22:11.0.5-32:11.0.5-42:11.1.0-2~ubuntu20.04.12:11.1.5-1~ubuntu20.04.22:11.2.5-2ubuntu1~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.22:11.3.0-2ubuntu0~ubuntu20.04.32:11.3.0-2ubuntu0~ubuntu20.04.42:11.3.0-2ubuntu0~ubuntu20.04.52:11.3.0-2ubuntu0~ubuntu20.04.6 |
2:11.3.0-2ubuntu0~ubuntu20.04.7 |
open-vm-toolsUbuntu:22.04:LTS |
before 2:12.1.5-3~ubuntu0.22.04.4, plus listed versions 2:11.3.0-2ubuntu12:11.3.0-2ubuntu22:11.3.5-12:11.3.5-1ubuntu22:11.3.5-1ubuntu3 Show 6 moreShow less2:11.3.5-1ubuntu42:11.3.5-1ubuntu4.12:12.1.0-1~ubuntu0.22.04.12:12.1.5-3~ubuntu0.22.04.12:12.1.5-3~ubuntu0.22.04.22:12.1.5-3~ubuntu0.22.04.3 |
2:12.1.5-3~ubuntu0.22.04.4 |
open-vm-toolsUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2:11.3.0-2ubuntu0~ubuntu20.04.7, plus listed versions 2:10.3.10-3ubuntu12:11.0.1-22:11.0.1-32:11.0.1-3ubuntu12:11.0.1-4 Show 13 moreShow less2:11.0.5-12:11.0.5-22:11.0.5-32:11.0.5-42:11.1.0-2~ubuntu20.04.12:11.1.5-1~ubuntu20.04.22:11.2.5-2ubuntu1~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.22:11.3.0-2ubuntu0~ubuntu20.04.32:11.3.0-2ubuntu0~ubuntu20.04.42:11.3.0-2ubuntu0~ubuntu20.04.52:11.3.0-2ubuntu0~ubuntu20.04.6 |
2:11.3.0-2ubuntu0~ubuntu20.04.7 |
open-vm-toolsUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 2:12.1.5-3~ubuntu0.22.04.4, plus listed versions 2:11.3.0-2ubuntu12:11.3.0-2ubuntu22:11.3.5-12:11.3.5-1ubuntu22:11.3.5-1ubuntu3 Show 6 moreShow less2:11.3.5-1ubuntu42:11.3.5-1ubuntu4.12:12.1.0-1~ubuntu0.22.04.12:12.1.5-3~ubuntu0.22.04.12:12.1.5-3~ubuntu0.22.04.22:12.1.5-3~ubuntu0.22.04.3 |
2:12.1.5-3~ubuntu0.22.04.4 |
open-vm-toolsUbuntu:Pro:16.04:LTS From an advisory covering 2 CVEs |
before 2:10.2.0-3~ubuntu0.16.04.1+esm4, plus listed versions 2:9.10.2-2822639-1ubuntu32:10.0.0-3000743-3ubuntu12:10.0.7-3227872-2ubuntu12:10.0.7-3227872-5ubuntu1~16.04.12:10.0.7-3227872-5ubuntu1~16.04.2 Show 4 moreShow less2:10.2.0-3~ubuntu0.16.04.12:10.2.0-3~ubuntu0.16.04.1+esm12:10.2.0-3~ubuntu0.16.04.1+esm22:10.2.0-3~ubuntu0.16.04.1+esm3 |
2:10.2.0-3~ubuntu0.16.04.1+esm4 |
open-vm-toolsUbuntu:Pro:18.04:LTS From an advisory covering 2 CVEs |
before 2:11.0.5-4ubuntu0.18.04.3+esm3, plus listed versions 2:10.1.10-32:10.1.10-3build12:10.1.15-12:10.1.15-1build12:10.2.0-2 Show 16 moreShow less2:10.2.0-2build12:10.2.0-32:10.2.0-3ubuntu12:10.2.0-3ubuntu22:10.2.0-3ubuntu32:10.3.0-0ubuntu1~18.04.12:10.3.0-0ubuntu1~18.04.22:10.3.0-0ubuntu1~18.04.32:10.3.5-7~ubuntu0.18.04.12:10.3.10-1~ubuntu0.18.04.12:11.0.1-2ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.12:11.0.5-4ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.32:11.0.5-4ubuntu0.18.04.3+esm12:11.0.5-4ubuntu0.18.04.3+esm2 |
2:11.0.5-4ubuntu0.18.04.3+esm3 |
open-vm-toolsopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 12.3.0-5.1 | 12.3.0-5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-34058 is a high vulnerability (CVSS 7.1) in Vmware Tools, published October 26, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in open-vm-tools 11.3.0-3.
References
vmware.com/security/advisories/VMSA-2023-0024.html
openwall.com/lists/oss-security/2023/10/27/1
debian.org/security/2023/dsa-5543
lists.debian.org/debian-lts-announce/2023/11/msg00002.html
lists.fedoraproject.org/archives/list/[email protected]/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK
lists.fedoraproject.org/archives/list/[email protected]/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2
Show 61 moreShow less
lists.fedoraproject.org/archives/list/[email protected]/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW
nvd.nist.gov/vuln/detail/CVE-2023-34058
github.com/advisories/GHSA-h5hf-5wcj-6hmf
access.redhat.com/errata/RHSA-2023:7265
access.redhat.com/security/cve/CVE-2023-34058
access.redhat.com/security/cve/CVE-2023-34059
bugzilla.redhat.com/2246080
bugzilla.redhat.com/2246096
errata.almalinux.org/8/ALSA-2023-7265.html
access.redhat.com/errata/RHSA-2023:7277
errata.almalinux.org/9/ALSA-2023-7277.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1750444475.html
github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34058.json
security-tracker.debian.org/tracker/CVE-2023-34058
advisories.mageia.org/MGASA-2024-0058.html
bugs.mageia.org/show_bug.cgi?id=32454
access.redhat.com/errata/RHSA-2023:3948
openwall.com/lists/oss-security/2023/10/27/2
github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1831
nvd.nist.gov/vuln/detail/CVE-2023-34059
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1832
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1833
access.redhat.com/errata/RHSA-2023:7260
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2246080
bugzilla.redhat.com/show_bug.cgi?id=2246096
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7260.json
cve.org/CVERecord?id=CVE-2023-34058
vmware.com/security/advisories/VMSA-2023-0024
cve.org/CVERecord?id=CVE-2023-34059
access.redhat.com/errata/RHSA-2023:7261
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7261.json
access.redhat.com/errata/RHSA-2023:7262
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7262.json
access.redhat.com/errata/RHSA-2023:7263
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7263.json
access.redhat.com/errata/RHSA-2023:7264
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7264.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7265.json
access.redhat.com/errata/RHSA-2023:7267
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7267.json
access.redhat.com/errata/RHSA-2023:7276
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7276.json
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7277.json
access.redhat.com/errata/RHSA-2023:7279
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7279.json
errata.rockylinux.org/RLSA-2023:7265
suse.com/support/update/announcement/2023/suse-su-20234227-1
bugzilla.suse.com/1216432
bugzilla.suse.com/1216433
suse.com/security/cve/CVE-2023-34058
suse.com/security/cve/CVE-2023-34059
suse.com/support/update/announcement/2023/suse-su-20234228-1
bugzilla.suse.com/1205927
suse.com/support/update/announcement/2023/suse-su-20234229-1
suse.com/support/update/announcement/2023/suse-su-20234230-1
ubuntu.com/security/CVE-2023-34058
ubuntu.com/security/notices/USN-6463-1
ubuntu.com/security/notices/USN-6463-2
ubuntu.com/security/CVE-2023-34059