CVE-2017-16777

2017-11-1615:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root.

References

m4.rkw.io/blog/cve201716777-local-root-privesc-in-hashicorp-vagrantvmwarefusion-503.html

www.exploit-db.com/exploits/43219/