CVE-2017-7642

概要

参考情報

• seclists.org/fulldisclosure/2017/Jul/29 · Exploit
• hashicorp/vagrant-plugin-changelog · Release Notes
• m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4020.html · Exploit
• exploit-db.com/exploits/42334 · Third Party Advisory

vagrant vmware fusion のその他の脆弱性

• CVE-2017-16873高 7.8It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5.0.4 in order to esca…
• CVE-2017-16839高 7.0Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.
• CVE-2017-16512高 7.8The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted …
• CVE-2017-15884高 7.0In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin upd…
• CVE-2017-12579高 7.8An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-ro…