Synopsis:          Low: open-vm-tools security and bug fix update
Advisory ID:       SLSA-2023:3944-1
Issue Date:        2023-06-30
CVE Numbers:       CVE-2023-20867
--

Security Fix(es):

* open-vm-tools: authentication bypass vulnerability in the vgauth module
(CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE

Bug Fix(es):

* [ESXi] [SL7] vmtoolsd task is blocked in the uninterruptible state
while attempting to delete (unlink) the file 'quiesce_manifest.xml'

* [ESXi][SL7.9][open-vm-tools] Snapshot of the SL7 guest on the VMWare
ESXi hypervisor failed vm hangs
--

SL7
  x86_64
    open-vm-tools-11.0.5-3.el7_9.6.x86_64.rpm
    open-vm-tools-debuginfo-11.0.5-3.el7_9.6.x86_64.rpm
    open-vm-tools-desktop-11.0.5-3.el7_9.6.x86_64.rpm
    open-vm-tools-devel-11.0.5-3.el7_9.6.x86_64.rpm
    open-vm-tools-test-11.0.5-3.el7_9.6.x86_64.rpm

- Scientific Linux Development Team

SciLinux: SLSA-2023-3944-1 Low: open-vm-tools on SL7.x x86_64

open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867) For more details about the security issue(s), including the impact, a CVSS score, acknowled...

Summary

Low: open-vm-tools security and bug fix update



Security Fixes

* open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE

Severity
Advisory ID: SLSA-2023:3944-1
Issued Date: : 2023-06-30
CVE Numbers: CVE-2023-20867

Related News