CVE-2023-20867

2023-06-1317:15:14

Debian Security Bug Tracker

security-tracker.debian.org

esxi host

vmware tools

authentication

guest vm

confidentiality

integrity

3.9 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

0.005 Low

EPSS

Percentile

76.6%

JSON

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

OSVersionArchitecturePackageVersionFilename
Debian12allopen-vm-tools< 2:12.2.0-1+deb12u1open-vm-tools_2:12.2.0-1+deb12u1_all.deb
Debian11allopen-vm-tools< 2:11.2.5-2+deb11u2open-vm-tools_2:11.2.5-2+deb11u2_all.deb
Debian999allopen-vm-tools< 2:12.2.5-1open-vm-tools_2:12.2.5-1_all.deb
Debian13allopen-vm-tools< 2:12.2.5-1open-vm-tools_2:12.2.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	open-vm-tools	< 2:12.2.0-1+deb12u1	open-vm-tools_2:12.2.0-1+deb12u1_all.deb
Debian	11	all	open-vm-tools	< 2:11.2.5-2+deb11u2	open-vm-tools_2:11.2.5-2+deb11u2_all.deb
Debian	999	all	open-vm-tools	< 2:12.2.5-1	open-vm-tools_2:12.2.5-1_all.deb
Debian	13	all	open-vm-tools	< 2:12.2.5-1	open-vm-tools_2:12.2.5-1_all.deb