Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-34057
HistoryOct 27, 2023 - 12:00 a.m.

CVE-2023-34057

2023-10-2700:00:00
ubuntu.com
ubuntu.com
9
cve-2023-34057
vmware tools
local privilege escalation
macos
ubuntu
vulnerability
malicious actor
guest virtual machine
elevate privileges
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

VMware Tools contains a local privilege escalation vulnerability. A
malicious actor with local user access to a guest virtual machine may
elevate privileges within the virtual machine.

Notes

Author Note
mdeslaur This is a macOS specific issue, Ubuntu is not affected

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for UB:CVE-2023-34057