Lucene search

[email protected]CVE-2015-5191

HistoryJul 28, 2017 - 9:29 p.m.

CVE-2015-5191

2017-07-2821:29:00

CWE-362

[email protected]

web.nvd.nist.gov

vmware

tools

security

vulnerability

local privilege escalation

file system races

libdeploypkg

cve-2015-5191

nvd

cvss

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected configurations

NVD

Node

vmwaretoolsRange≤10.0.8

AND

linuxlinux_kernel

CPENameOperatorVersion
vmware:toolsvmware toolsle10.0.8

CPE	Name	Operator	Version
vmware:tools	vmware tools	le	10.0.8

CNA Affected

[
  {
    "product": "VMware Tools",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Tools prior to 10.0.9"
      }
    ]
  }
]