CVE-2023-34059

概要

参考情報

• openwall.com/lists/oss-security/2023/10/27/2 · Mailing List
• openwall.com/lists/oss-security/2023/10/27/3 · Mailing List
• openwall.com/lists/oss-security/2023/11/26/1
• openwall.com/lists/oss-security/2023/11/27/1
• lists.debian.org/debian-lts-announce/2023/11/msg00002.html · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2
• lists.fedoraproject.org/archives/list/[email protected]/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW
• lists.fedoraproject.org/archives/list/[email protected]/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK
• debian.org/security/2023/dsa-5543 · Third Party Advisory
• vmware.com/security/advisories/VMSA-2023-0024.html

open vm tools のその他の脆弱性

• CVE-2025-41244高 7.8悪用確認済み（CISA KEV）VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative …
• CVE-2023-34058高 7.5VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https…
• CVE-2023-20900高 7.5A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A95…
• CVE-2009-1142中 6.7An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-use…