{"id":"CVE-2023-34058","aliases":["ALSA-2023:7265","ALSA-2023:7277","AZL-31718","CLSA-2025-1750444475","DEBIAN-CVE-2023-34058","DLA-3646-1","DSA-5543-1","EUVD-2023-38172","GHSA-h5hf-5wcj-6hmf","MGASA-2024-0058","OESA-2023-1831","OESA-2023-1832","OESA-2023-1833","RHSA-2023:7260","RHSA-2023:7261","RHSA-2023:7262","RHSA-2023:7263","RHSA-2023:7264","RHSA-2023:7265","RHSA-2023:7267","RHSA-2023:7276","RHSA-2023:7277","RHSA-2023:7279","RLSA-2023:7265","SUSE-SU-2023:4227-1","SUSE-SU-2023:4228-1","SUSE-SU-2023:4229-1","SUSE-SU-2023:4230-1","UBUNTU-CVE-2023-34058","USN-6463-1","USN-6463-2","openSUSE-SU-2024:13374-1"],"status":"published","title":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00813,"percentile":0.57323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-347"],"published":"2023-10-26T00:00:00Z","modified":"2026-10-29T11:31:35Z","fixes":[{"ecosystem":"Azure Linux:2","package":"open-vm-tools","fixed_in":["11.3.0-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"open-vm-tools","fixed_in":["2:12.2.0-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"open-vm-tools","fixed_in":["2:12.3.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"open-vm-tools","fixed_in":["2:12.3.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","fixed_in":["2:10.2.0-3~ubuntu0.16.04.1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","fixed_in":["2:11.0.5-4ubuntu0.18.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","fixed_in":["2:11.3.0-2ubuntu0~ubuntu20.04.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","fixed_in":["2:12.1.5-3~ubuntu0.22.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el8_9.1.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el8_9.1.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el8_9.1.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el8_9.1.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el9_3.2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el9_3.2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el9_3.2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el9_3.2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.5-3.el9_3.2.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.0-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9.3.alma.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.0-1+deb12u2"}]}],"versions":["2:12.2.0-1","2:12.2.0-1+deb12u1","2:12.2.0-1+deb12u1~bpo11+1","2:12.2.0-1+deb12u2~bpo10+1","2:12.2.0-1+deb12u2~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.3.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.3.5-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.3.10-1+deb10u6"}]}],"versions":["2:10.3.10-1","2:10.3.10-1+deb10u1","2:10.3.10-1+deb10u2","2:10.3.10-1+deb10u2~bpo9+1","2:10.3.10-1+deb10u3","2:10.3.10-1+deb10u4","2:10.3.10-1+deb10u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.2.5-2+deb11u3"}]}],"versions":["2:11.2.5-2","2:11.2.5-2+deb11u1","2:11.2.5-2+deb11u2","2:11.2.5-2+deb11u3~bpo10+1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.0-1+deb12u2"}]}],"versions":["2:12.2.0-1","2:12.2.0-1+deb12u1","2:12.2.0-1+deb12u1~bpo11+1","2:12.2.0-1+deb12u2~bpo10+1","2:12.2.0-1+deb12u2~bpo11+1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.5-2.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5-4.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5-4.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-3.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el9_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.2.5-3.el8_9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.43.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-4.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150100.4.37.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150100.4.37.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150100.4.37.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.2.0-3~ubuntu0.16.04.1+esm4"}]}],"versions":["2:9.10.2-2822639-1ubuntu3","2:10.0.0-3000743-3ubuntu1","2:10.0.7-3227872-2ubuntu1","2:10.0.7-3227872-5ubuntu1~16.04.1","2:10.0.7-3227872-5ubuntu1~16.04.2","2:10.2.0-3~ubuntu0.16.04.1","2:10.2.0-3~ubuntu0.16.04.1+esm1","2:10.2.0-3~ubuntu0.16.04.1+esm2","2:10.2.0-3~ubuntu0.16.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.0.5-4ubuntu0.18.04.3+esm3"}]}],"versions":["2:10.1.10-3","2:10.1.10-3build1","2:10.1.15-1","2:10.1.15-1build1","2:10.2.0-2","2:10.2.0-2build1","2:10.2.0-3","2:10.2.0-3ubuntu1","2:10.2.0-3ubuntu2","2:10.2.0-3ubuntu3","2:10.3.0-0ubuntu1~18.04.1","2:10.3.0-0ubuntu1~18.04.2","2:10.3.0-0ubuntu1~18.04.3","2:10.3.5-7~ubuntu0.18.04.1","2:10.3.10-1~ubuntu0.18.04.1","2:11.0.1-2ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.1","2:11.0.5-4ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.3","2:11.0.5-4ubuntu0.18.04.3+esm1","2:11.0.5-4ubuntu0.18.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.3.0-2ubuntu0~ubuntu20.04.7"}]}],"versions":["2:10.3.10-3ubuntu1","2:11.0.1-2","2:11.0.1-3","2:11.0.1-3ubuntu1","2:11.0.1-4","2:11.0.5-1","2:11.0.5-2","2:11.0.5-3","2:11.0.5-4","2:11.1.0-2~ubuntu20.04.1","2:11.1.5-1~ubuntu20.04.2","2:11.2.5-2ubuntu1~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.2","2:11.3.0-2ubuntu0~ubuntu20.04.3","2:11.3.0-2ubuntu0~ubuntu20.04.4","2:11.3.0-2ubuntu0~ubuntu20.04.5","2:11.3.0-2ubuntu0~ubuntu20.04.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.1.5-3~ubuntu0.22.04.4"}]}],"versions":["2:11.3.0-2ubuntu1","2:11.3.0-2ubuntu2","2:11.3.5-1","2:11.3.5-1ubuntu2","2:11.3.5-1ubuntu3","2:11.3.5-1ubuntu4","2:11.3.5-1ubuntu4.1","2:12.1.0-1~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.2","2:12.1.5-3~ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.3.0-2ubuntu0~ubuntu20.04.7"}]}],"versions":["2:10.3.10-3ubuntu1","2:11.0.1-2","2:11.0.1-3","2:11.0.1-3ubuntu1","2:11.0.1-4","2:11.0.5-1","2:11.0.5-2","2:11.0.5-3","2:11.0.5-4","2:11.1.0-2~ubuntu20.04.1","2:11.1.5-1~ubuntu20.04.2","2:11.2.5-2ubuntu1~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.2","2:11.3.0-2ubuntu0~ubuntu20.04.3","2:11.3.0-2ubuntu0~ubuntu20.04.4","2:11.3.0-2ubuntu0~ubuntu20.04.5","2:11.3.0-2ubuntu0~ubuntu20.04.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.1.5-3~ubuntu0.22.04.4"}]}],"versions":["2:11.3.0-2ubuntu1","2:11.3.0-2ubuntu2","2:11.3.5-1","2:11.3.5-1ubuntu2","2:11.3.5-1ubuntu3","2:11.3.5-1ubuntu4","2:11.3.5-1ubuntu4.1","2:12.1.0-1~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.2","2:12.1.5-3~ubuntu0.22.04.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.2.0-3~ubuntu0.16.04.1+esm4"}]}],"versions":["2:9.10.2-2822639-1ubuntu3","2:10.0.0-3000743-3ubuntu1","2:10.0.7-3227872-2ubuntu1","2:10.0.7-3227872-5ubuntu1~16.04.1","2:10.0.7-3227872-5ubuntu1~16.04.2","2:10.2.0-3~ubuntu0.16.04.1","2:10.2.0-3~ubuntu0.16.04.1+esm1","2:10.2.0-3~ubuntu0.16.04.1+esm2","2:10.2.0-3~ubuntu0.16.04.1+esm3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.0.5-4ubuntu0.18.04.3+esm3"}]}],"versions":["2:10.1.10-3","2:10.1.10-3build1","2:10.1.15-1","2:10.1.15-1build1","2:10.2.0-2","2:10.2.0-2build1","2:10.2.0-3","2:10.2.0-3ubuntu1","2:10.2.0-3ubuntu2","2:10.2.0-3ubuntu3","2:10.3.0-0ubuntu1~18.04.1","2:10.3.0-0ubuntu1~18.04.2","2:10.3.0-0ubuntu1~18.04.3","2:10.3.5-7~ubuntu0.18.04.1","2:10.3.10-1~ubuntu0.18.04.1","2:11.0.1-2ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.1","2:11.0.5-4ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.3","2:11.0.5-4ubuntu0.18.04.3+esm1","2:11.0.5-4ubuntu0.18.04.3+esm2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-5.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"microsoft","product":"open-vm-tools"},{"vendor":"vmware","product":"open_vm_tools"},{"vendor":"vmware","product":"tools"}],"references":[{"url":"https://www.vmware.com/security/advisories/VMSA-2023-0024.html","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/27/1","tags":["x_transferred","Mailing List","Patch","web"]},{"url":"https://www.debian.org/security/2023/dsa-5543","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00002.html","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34058","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK"},{"url":"https://github.com/advisories/GHSA-h5hf-5wcj-6hmf"},{"url":"https://access.redhat.com/errata/RHSA-2023:7265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-34058","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-34059","tags":["report"]},{"url":"https://bugzilla.redhat.com/2246080","tags":["report"]},{"url":"https://bugzilla.redhat.com/2246096","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7265.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7277","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-7277.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1750444475.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34058.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-34058","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0058.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32454","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3948","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/10/27/1","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/10/27/2","tags":["web"]},{"url":"https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34059","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1832","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1833","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7260","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246096","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7260.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-34058","tags":["advisory","report"]},{"url":"https://www.vmware.com/security/advisories/VMSA-2023-0024","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-34059","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7261","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7261.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7262","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7262.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7263","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7263.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7264","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7264.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7265.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7267","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7267.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7276","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7276.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7277.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7279","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7279.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:7265","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234227-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216432","tags":["report"]},{"url":"https://bugzilla.suse.com/1216433","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34059","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234228-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205927","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234229-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234230-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-34058","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6463-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6463-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-34059","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-34058","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T04:53:09.935Z","modified":"2025-03-06T15:40:20.221Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-38172","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T04:53:09Z","modified":"2025-03-06T15:40:20Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:11.47787Z"}],"ghsa":[{"id":"GHSA-h5hf-5wcj-6hmf","title":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T06:31:02Z","modified":"2025-03-06T18:32:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T15:00:10.280872Z"}],"nvd":[{"id":"CVE-2023-34058","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T05:15:38.957Z","modified":"2026-06-17T06:02:50.553Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:08:40.004465Z"}],"osv":[{"id":"AZL-31718","title":"CVE-2023-34058 affecting package open-vm-tools for versions less than 11.3.0-3","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T05:15:38Z","modified":"2026-04-21T04:26:28.174691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2023-34058","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T04:53:09.935Z","modified":"2026-10-28T02:30:57.26979449Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:32.116263Z"},{"id":"DEBIAN-CVE-2023-34058","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-27T05:15:38.957Z","modified":"2026-10-26T18:02:29.016799403Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1831","title":"open-vm-tools security update","description":"The  project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .\r\n\r\nSecurity Fix(es):\r\n\r\nVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-34058)\r\n\r\nopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the \n/dev/uinput file descriptor allowing them to simulate user inputs.(CVE-2023-34059)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:18:04.045141265Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1832","title":"open-vm-tools security update","description":"The  project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .\r\n\r\nSecurity Fix(es):\r\n\r\nVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-34058)\r\n\r\nopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the \n/dev/uinput file descriptor allowing them to simulate user inputs.(CVE-2023-34059)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:18:04.312529511Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1833","title":"open-vm-tools security update","description":"The  project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .\r\n\r\nSecurity Fix(es):\r\n\r\nVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-34058)\r\n\r\nopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the \n/dev/uinput file descriptor allowing them to simulate user inputs.(CVE-2023-34059)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:18:03.849180108Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:7260","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:01:43Z","modified":"2026-05-01T10:07:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7261","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:02:13Z","modified":"2026-05-01T10:07:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7262","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:01:53Z","modified":"2026-05-01T10:07:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7263","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:01:34Z","modified":"2026-05-01T10:07:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7264","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:00:39Z","modified":"2026-05-01T10:07:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7265","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:57:21Z","modified":"2026-05-01T10:07:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7267","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-17T01:30:49Z","modified":"2026-05-01T10:07:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7276","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:01:24Z","modified":"2026-05-01T10:07:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7277","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T14:02:03Z","modified":"2026-05-01T10:07:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7279","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-17T01:30:38Z","modified":"2026-06-26T12:22:21.648290391Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-34058","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-10-26T00:00:00Z","modified":"2026-04-22T14:07:47.457027Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"ALSA-2023:7265","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-34058)\n* open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-15T00:00:00Z","modified":"2026-10-29T11:02:19.386369513Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7277","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-34058)\n* open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-15T00:00:00Z","modified":"2026-10-29T11:31:35.702396001Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1750444475","title":"open-vm-tools: Fix of 2 CVEs","description":"- CVE-2023-34058: don't accept tokens with unrelated certs\n- CVE-2023-34059: fix file descriptor vuln by moving privilege drop from suidWrapper to vmtoolsd","status":"published","published":"2025-06-20T18:34:40Z","modified":"2026-06-01T00:30:54.71097417Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-3646-1","title":"open-vm-tools - security update","status":"published","published":"2023-11-05T00:00:00Z","modified":"2026-03-09T01:21:11.987188Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5543-1","title":"open-vm-tools - security update","status":"published","published":"2023-10-31T00:00:00Z","modified":"2026-03-09T02:09:13.201449Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0058","title":"Updated open-vm-tools packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nAuthentication bypass vulnerability in the vgauth module.\n(CVE-2023-20867)\nSAML token signature bypass. (CVE-2023-34058)\nFile descriptor hijack vulnerability in the vmware-user-suid-wrapper.\n(CVE-2023-34059)\n","status":"published","published":"2024-03-14T17:25:59Z","modified":"2026-04-16T04:42:12.783329978Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13374-1","title":"libvmtools-devel-12.3.0-5.1 on GA media","description":"These are all security issues fixed in the libvmtools-devel-12.3.0-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:59.628874Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2023:7265","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-34058)\n\n* open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-28T22:43:02.525343Z","modified":"2026-02-04T23:45:04.717541Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:4227-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-34058: Fixed a SAML token signature bypass issue\n  (bsc#1216432).\n- CVE-2023-34059: Fixed a privilege escalation issue through\n  vmware-user-suid-wrapper (bsc#1216433).\n","status":"published","published":"2023-10-27T09:26:38Z","modified":"2026-02-04T02:46:20.700471Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4228-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-34058: Fixed a SAML token signature bypass issue\n  (bsc#1216432).\n- CVE-2023-34059: Fixed a privilege escalation issue through\n  vmware-user-suid-wrapper (bsc#1216433).\n","status":"published","published":"2023-10-27T09:27:08Z","modified":"2026-02-04T02:33:10.026414Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4229-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-34058: Fixed a SAML token signature bypass issue\n  (bsc#1216432).\n- CVE-2023-34059: Fixed a privilege escalation issue through\n  vmware-user-suid-wrapper (bsc#1216433).\n","status":"published","published":"2023-10-27T09:27:19Z","modified":"2026-02-04T03:48:19.969571Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4230-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-34058: Fixed a SAML token signature bypass issue\n  (bsc#1216432).\n- CVE-2023-34059: Fixed a privilege escalation issue through\n  vmware-user-suid-wrapper (bsc#1216433).\n","status":"published","published":"2023-10-27T09:27:32Z","modified":"2026-02-04T03:34:16.18088Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6463-1","title":"open-vm-tools vulnerabilities","description":"It was discovered that Open VM Tools incorrectly handled SAML tokens. A\nremote attacker Guest Operations privileges could possibly use this issue\nto escalate privileges. (CVE-2023-34058)\n\nMatthias Gerstner discovered that Open VM Tools incorrectly handled file\ndescriptors when dropping privileges. A local attacker could possibly use\nthis issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059)\n","status":"published","published":"2023-10-31T14:47:07Z","modified":"2026-04-22T10:41:01.733404Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6463-2","title":"open-vm-tools vulnerabilities","description":"USN-6463-1 fixed vulnerabilities in Open VM Tools. This update provides\nthe corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Open VM Tools incorrectly handled SAML tokens. A\n remote attacker with Guest Operations privileges could possibly use this\n issue to elevate their privileges. (CVE-2023-34058)\n \n Matthias Gerstner discovered that Open VM Tools incorrectly handled file\n descriptors when dropping privileges. A local attacker could possibly use\n this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059)\n","status":"published","published":"2023-12-06T09:43:32Z","modified":"2026-06-25T13:31:28.797336279Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}