Yi Zhao 5782095b7b open-vm-tools: Security fixes CVE-2023-34059 ...

CVE-2023-34059:
open-vm-tools contains a file descriptor hijack vulnerability in the
vmware-user-suid-wrapper. A malicious actor with non-root privileges may
be able to hijack the /dev/uinput file descriptor allowing them to
simulate user inputs.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-34059

Patch from:
https://github.com/vmware/open-vm-tools/blob/CVE-2023-34059.patch/CVE-2023-34059.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2024-12-08 14:39:17 -05:00

..

open-vm-tools

open-vm-tools: Security fixes CVE-2023-34059

2024-12-08 14:39:17 -05:00

open-vm-tools_11.3.5.bb

open-vm-tools: Security fixes CVE-2023-34059

2024-12-08 14:39:17 -05:00