Every CVE Search/ Get API key

CVE-2023-20867

VMware Tools Authentication Bypass Vulnerability

3.9 LowIn KEVFix available

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

13.6%Up 13.6 points since Jun 14, 2023
90%50%10%1%

What each source reports

CVE List Score used 3.9

VMware Tools Authentication Bypass Vulnerability

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
CVE-2023-20867
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
EUVDEUVD-2023-25040 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
EUVD-2023-25040
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-qm59-f7vh-3m2p 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest...

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
GHSA-qm59-f7vh-3m2p
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
CISA KEV No score

VMware Tools Authentication Bypass Vulnerability

VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.

Record
CVE-2023-20867
Weakness
CWE-287
Updated
2026-11-02
NVD 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
CVE-2023-20867
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Weakness
CWE-287
Updated
2026-11-02
OSVALPINE-CVE-2023-20867 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
ALPINE-CVE-2023-20867
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-03
Show 25 moreShow less
OSV 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
CVE-2023-20867
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2023-20867 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
DEBIAN-CVE-2023-20867
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2023-1629 7.5

open-vm-tools security update

The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .

Security Fix(es):

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.(CVE-2023-20867)

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-20900)

Record
OESA-2023-1629
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1630 7.5

open-vm-tools security update

The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .

Security Fix(es):

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.(CVE-2023-20867)

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-20900)

Record
OESA-2023-1630
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1631 7.5

open-vm-tools security update

The project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .

Security Fix(es):

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.(CVE-2023-20867)

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-20900)

Record
OESA-2023-1631
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3944 3.9

Red Hat Security Advisory: open-vm-tools security and bug fix update

Record
RHSA-2023:3944
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3945 3.9

Red Hat Security Advisory: open-vm-tools security update

Record
RHSA-2023:3945
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3946 3.9

Red Hat Security Advisory: open-vm-tools security update

Record
RHSA-2023:3946
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3947 3.9

Red Hat Security Advisory: open-vm-tools security update

Record
RHSA-2023:3947
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3948 3.9

Red Hat Security Advisory: open-vm-tools security update

Record
RHSA-2023:3948
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3949 3.9

Red Hat Security Advisory: open-vm-tools security update

Record
RHSA-2023:3949
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3950 3.9

Red Hat Security Advisory: open-vm-tools security update

Record
RHSA-2023:3950
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2023-20867 3.9

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Record
UBUNTU-CVE-2023-20867
CVSS 3.1
3.9 LowCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVALSA-2023:3948 No score

Low: open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

  • open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:3948
Updated
2026-11-02
OSVALSA-2023:3949 No score

Low: open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

  • open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:3949
Updated
2026-11-02
OSVMGASA-2024-0058 No score

Updated open-vm-tools packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Authentication bypass vulnerability in the vgauth module. (CVE-2023-20867) SAML token signature bypass. (CVE-2023-34058) File descriptor hijack vulnerability in the vmware-user-suid-wrapper. (CVE-2023-34059)

Record
MGASA-2024-0058
Updated
2026-11-02
OSVopenSUSE-SU-2024:13022-1 No score

libvmtools-devel-12.2.0-4.1 on GA media

These are all security issues fixed in the libvmtools-devel-12.2.0-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13022-1
Updated
2026-11-02
OSVRLSA-2023:3948 No score

Low: open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

  • open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:3948
Updated
2026-11-02
OSVRLSA-2023:3949 No score

Low: open-vm-tools security update

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

  • open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:3949
Updated
2026-11-02
OSVSUSE-SU-2023:2530-1 No score

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).

Bug fixes:

  • Fixed build problem with grpc 1.54 (bsc#1210695).
Record
SUSE-SU-2023:2530-1
Updated
2026-11-02
OSVSUSE-SU-2023:2604-1 No score

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).

Bug fixes:

  • Fixed build problem with grpc 1.54 (bsc#1210695).
Record
SUSE-SU-2023:2604-1
Updated
2026-11-02
OSVSUSE-SU-2023:2604-2 No score

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).

Bug fixes:

  • Fixed build problem with grpc 1.54 (bsc#1210695).
Record
SUSE-SU-2023:2604-2
Updated
2026-11-02
OSVSUSE-SU-2023:3504-1 No score

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).
  • CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).
Record
SUSE-SU-2023:3504-1
Updated
2026-11-02
OSVSUSE-SU-2023:3505-1 No score

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).
  • CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).
Record
SUSE-SU-2023:3505-1
Updated
2026-11-02
OSVUSN-6257-1 No score

open-vm-tools vulnerability

It was discovered that Open VM Tools incorrectly handled certain authentication requests. A fully compromised ESXi host can force Open VM Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. (CVE-2023-20867)

Record
USN-6257-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
open-vm-tools
Alpine:v3.18
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
Alpine:v3.19
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
Alpine:v3.20
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
Alpine:v3.21
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
Alpine:v3.22
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
Alpine:v3.23
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
Alpine:v3.24
 before 12.2.5-r0
12.2.5-r0
open-vm-tools
AlmaLinux:9
 before 12.1.5-1.el9_2.1.alma
12.1.5-1.el9_2.1.alma
open-vm-tools-desktop
AlmaLinux:9
 before 12.1.5-1.el9_2.1.alma
12.1.5-1.el9_2.1.alma
open-vm-tools-salt-minion
AlmaLinux:9
 before 12.1.5-1.el9_2.1.alma
12.1.5-1.el9_2.1.alma
Show 147 moreShow less
Affected packages
PackageAffectedFixed
open-vm-tools-sdmp
AlmaLinux:9
 before 12.1.5-1.el9_2.1.alma
12.1.5-1.el9_2.1.alma
open-vm-tools-test
AlmaLinux:9
 before 12.1.5-1.el9_2.1.alma
12.1.5-1.el9_2.1.alma
open-vm-tools
AlmaLinux:8
 before 12.1.5-2.el8_8.alma
12.1.5-2.el8_8.alma
open-vm-tools-desktop
AlmaLinux:8
 before 12.1.5-2.el8_8.alma
12.1.5-2.el8_8.alma
open-vm-tools-salt-minion
AlmaLinux:8
 before 12.1.5-2.el8_8.alma
12.1.5-2.el8_8.alma
open-vm-tools-sdmp
AlmaLinux:8
 before 12.1.5-2.el8_8.alma
12.1.5-2.el8_8.alma
open-vm-tools
Debian:12
 before 2:12.2.0-1+deb12u1, plus listed versions
2:12.2.0-12:12.2.0-1+deb12u1~bpo11+1
2:12.2.0-1+deb12u1
open-vm-tools
Debian:13
 before 2:12.2.5-1
2:12.2.5-1
open-vm-tools
Debian:14
 before 2:12.2.5-1
2:12.2.5-1
open-vm-tools
Debian:10
 before 2:10.3.10-1+deb10u4, plus listed versions
2:10.3.10-12:10.3.10-1+deb10u12:10.3.10-1+deb10u22:10.3.10-1+deb10u2~bpo9+12:10.3.10-1+deb10u3
2:10.3.10-1+deb10u4
open-vm-tools
Debian:11
From an advisory covering 2 CVEs
 before 2:11.2.5-2+deb11u2, plus listed versions
2:11.2.5-22:11.2.5-2+deb11u1
2:11.2.5-2+deb11u2
open-vm-tools
Debian:12
From an advisory covering 2 CVEs
 before 2:12.2.0-1+deb12u1, plus listed versions
2:12.2.0-12:12.2.0-1+deb12u1~bpo11+1
2:12.2.0-1+deb12u1
open-vm-tools
Mageia:9
From an advisory covering 3 CVEs
 before 12.3.5-2.mga9
12.3.5-2.mga9
open-vm-tools
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 12.0.5-3.oe2203
12.0.5-3.oe2203
open-vm-tools
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 12.0.5-3.oe2203sp1
12.0.5-3.oe2203sp1
open-vm-tools
openEuler:22.03-LTS-SP2
From an advisory covering 2 CVEs
 before 12.1.5-2.oe2203sp2
12.1.5-2.oe2203sp2
open-vm-tools
Red Hat:enterprise_linux:7::client
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-desktop
Red Hat:enterprise_linux:7::client
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-devel
Red Hat:enterprise_linux:7::client
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-test
Red Hat:enterprise_linux:7::client
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-devel
Red Hat:enterprise_linux:7::computenode
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-test
Red Hat:enterprise_linux:7::computenode
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools
Red Hat:enterprise_linux:7::server
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-desktop
Red Hat:enterprise_linux:7::server
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-devel
Red Hat:enterprise_linux:7::server
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-test
Red Hat:enterprise_linux:7::server
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools
Red Hat:enterprise_linux:7::workstation
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-desktop
Red Hat:enterprise_linux:7::workstation
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-devel
Red Hat:enterprise_linux:7::workstation
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools-test
Red Hat:enterprise_linux:7::workstation
 before 0:11.0.5-3.el7_9.6
0:11.0.5-3.el7_9.6
open-vm-tools
Red Hat:rhel_aus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-desktop
Red Hat:rhel_aus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-test-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools
Red Hat:rhel_e4s:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-debugsource
Red Hat:rhel_e4s:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-desktop
Red Hat:rhel_e4s:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-test-debuginfo
Red Hat:rhel_e4s:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools
Red Hat:rhel_tus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-debugsource
Red Hat:rhel_tus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-desktop
Red Hat:rhel_tus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools-test-debuginfo
Red Hat:rhel_tus:8.2::appstream
 before 0:11.0.0-4.el8_2.2
0:11.0.0-4.el8_2.2
open-vm-tools
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-desktop
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-sdmp
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-sdmp-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-test-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-debugsource
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-desktop
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-sdmp
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-sdmp-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-test-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-debugsource
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-desktop
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-sdmp
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-sdmp-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools-test-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:11.2.0-2.el8_4.2
0:11.2.0-2.el8_4.2
open-vm-tools
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-debugsource
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-desktop
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-sdmp
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-sdmp-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-test
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools-test-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:11.3.5-1.el9_0.2
0:11.3.5-1.el9_0.2
open-vm-tools
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-desktop
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-desktop-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-salt-minion
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-sdmp
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-sdmp-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-test
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools-test-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-desktop
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-desktop-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-salt-minion
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-sdmp
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-sdmp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools-test-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-debugsource
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-desktop
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-desktop-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-sdmp
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-sdmp-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools-test-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:11.3.5-1.el8_6.2
0:11.3.5-1.el8_6.2
open-vm-tools
Rocky Linux:9
 before 0:12.1.5-1.el9_2.1
0:12.1.5-1.el9_2.1
open-vm-tools
Rocky Linux:8
 before 0:12.1.5-2.el8_8
0:12.1.5-2.el8_8
open-vm-tools
SUSE:Linux Enterprise Server 12 SP5
 before 12.2.0-4.53.1
12.2.0-4.53.1
open-vm-tools
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 12.2.0-4.53.1
12.2.0-4.53.1
open-vm-tools
SUSE:Linux Enterprise Micro 5.3
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Micro 5.4
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Real Time 15 SP3
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Micro 5.1
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Micro 5.2
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
openSUSE:Leap Micro 5.3
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
openSUSE:Leap 15.4
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
openSUSE:Leap 15.5
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Manager Proxy 4.2
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Manager Server 4.2
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Enterprise Storage 7.1
 before 12.2.0-150300.29.1
12.2.0-150300.29.1
open-vm-tools
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 11.3.5-150100.4.37.18.1
11.3.5-150100.4.37.18.1
open-vm-tools
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 11.3.5-150100.4.37.18.1
11.3.5-150100.4.37.18.1
open-vm-tools
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 11.3.5-150100.4.37.18.1
11.3.5-150100.4.37.18.1
open-vm-tools
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 11.3.5-150200.5.16.16.1
11.3.5-150200.5.16.16.1
open-vm-tools
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 11.3.5-150200.5.16.16.1
11.3.5-150200.5.16.16.1
open-vm-tools
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 11.3.5-150200.5.16.16.1
11.3.5-150200.5.16.16.1
open-vm-tools
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 11.3.5-150200.5.16.16.1
11.3.5-150200.5.16.16.1
open-vm-tools
Ubuntu:Pro:16.04:LTS
 before 2:10.2.0-3~ubuntu0.16.04.1+esm2, plus listed versions
2:9.10.2-2822639-1ubuntu32:10.0.0-3000743-3ubuntu12:10.0.7-3227872-2ubuntu12:10.0.7-3227872-5ubuntu1~16.04.12:10.0.7-3227872-5ubuntu1~16.04.22:10.2.0-3~ubuntu0.16.04.12:10.2.0-3~ubuntu0.16.04.1+esm1
2:10.2.0-3~ubuntu0.16.04.1+esm2
open-vm-tools
Ubuntu:Pro:18.04:LTS
 before 2:11.0.5-4ubuntu0.18.04.3+esm1, plus listed versions
2:10.1.10-32:10.1.10-3build12:10.1.15-12:10.1.15-1build12:10.2.0-2
Show 14 moreShow less
2:10.2.0-2build12:10.2.0-32:10.2.0-3ubuntu12:10.2.0-3ubuntu22:10.2.0-3ubuntu32:10.3.0-0ubuntu1~18.04.12:10.3.0-0ubuntu1~18.04.22:10.3.0-0ubuntu1~18.04.32:10.3.5-7~ubuntu0.18.04.12:10.3.10-1~ubuntu0.18.04.12:11.0.1-2ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.12:11.0.5-4ubuntu0.18.04.22:11.0.5-4ubuntu0.18.04.3
2:11.0.5-4ubuntu0.18.04.3+esm1
open-vm-tools
Ubuntu:20.04:LTS
 before 2:11.3.0-2ubuntu0~ubuntu20.04.5, plus listed versions
2:10.3.10-3ubuntu12:11.0.1-22:11.0.1-32:11.0.1-3ubuntu12:11.0.1-4
Show 11 moreShow less
2:11.0.5-12:11.0.5-22:11.0.5-32:11.0.5-42:11.1.0-2~ubuntu20.04.12:11.1.5-1~ubuntu20.04.22:11.2.5-2ubuntu1~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.12:11.3.0-2ubuntu0~ubuntu20.04.22:11.3.0-2ubuntu0~ubuntu20.04.32:11.3.0-2ubuntu0~ubuntu20.04.4
2:11.3.0-2ubuntu0~ubuntu20.04.5
open-vm-tools
Ubuntu:22.04:LTS
 before 2:12.1.5-3~ubuntu0.22.04.2, plus listed versions
2:11.3.0-2ubuntu12:11.3.0-2ubuntu22:11.3.5-12:11.3.5-1ubuntu22:11.3.5-1ubuntu3
Show 4 moreShow less
2:11.3.5-1ubuntu42:11.3.5-1ubuntu4.12:12.1.0-1~ubuntu0.22.04.12:12.1.5-3~ubuntu0.22.04.1
2:12.1.5-3~ubuntu0.22.04.2
open-vm-tools
openSUSE:Tumbleweed
 before 12.2.0-4.1
12.2.0-4.1

History

History
RecordedChangedSources
affected
exploitation
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-20867 is a low vulnerability (CVSS 3.9) in Vmware Tools, published June 13, 2023. CISA lists it as known to be exploited, since June 23, 2023. EUVD reports exploitation since June 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.6%, the 96th percentile. Fixed in open-vm-tools 12.2.5-r0.

References

Show 56 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open