Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Ubuntu 14.04 LTS Security Advisory USN-7714-1 Open VM Tools Critical Fixes

ubuntu
Calendar Grey August 31, 2025
Dist Ubuntu Esm H88
The vulnerabilities in Open VM Tools on Ubuntu 14.04 LTS have been patched. Ensure you update your system to safeguard against potential local exploitation.
Several security issues were fixed in Open VM Tools.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Open VM Tools. Software Description: - open-vm-tools: Open VMware Tools for virtual machines hosted on VMware Details: Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059) Dolev Farhi discovered that Open VM Tools incorrectly handled certain file permissions. A local attacker could possibly use this issue to setup a symlink attack and override files without authorization. (CVE-2014-4199)

Topics%20covered

Topics Covered

security advisory Ubuntu symlink attack local attack file descriptor open-vm-tools

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS open-vm-tools 2:9.4.0-1280544-5ubuntu6.4+esm1 Available with Ubuntu Pro open-vm-tools-desktop 2:9.4.0-1280544-5ubuntu6.4+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7714-1

CVE-2014-4199, CVE-2023-34059

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7714-1

Topics%20covered

Topics Covered

security advisory Ubuntu symlink attack local attack file descriptor open-vm-tools

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here