Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 11: DLA-4165-1 moderate: open-vm-tools file handling

debian lts
Calendar Grey May 14, 2025
Dist Debian Esm H88
Important security patch released for open-vm-tools to fix vulnerabilities in file management. Immediate upgrade advised for Ubuntu installations.
open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware
Topics%20covered

Topics Covered

security advisory debian insecure handling moderate threat open-vm-tools file tampering

Summary

CVE-2025-22247

Fixing an insecure file handling vulnerability.
It allowed a malicious actor with non-administrative privileges
on a guest VM to tamper the local files to trigger insecure file
operations within that VM. VMSA-2025-0007


For Debian 11 bullseye, this problem has been fixed in version
2:11.2.5-2+deb11u4.

We recommend that you upgrade your open-vm-tools packages.

For the detailed security status of open-vm-tools please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/open-vm-tools

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: open-vm-tools
Version: 2:11.2.5-2+deb11u4
CVE ID: CVE-2025-22247
Debian Bug: 1105159

Topics%20covered

Topics Covered

security advisory debian insecure handling moderate threat open-vm-tools file tampering

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here