CVE-2022-31676

Name
CVE-2022-31676
Description
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://www.vmware.com/security/advisories/VMSA-2022-0024.html
MLIST http://www.openwall.com/lists/oss-security/2022/08/23/3
DEBIAN https://www.debian.org/security/2022/dsa-5215
MLIST https://lists.debian.org/debian-lts-announce/2022/08/msg00013.html
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O4TZF6QRJIDECGMEGBPXJCHZ6YC3VZ6Z/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C5VV2R4LV4T3SNQJYRLFD4C75HBDVV76/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZA63DWRW7HROTVBNRIPBJQWBYIYAQMEW/
Third Party Advisory https://security.netapp.com/advisory/ntap-20221017-0003/
Third Party Advisory https://security.gentoo.org/glsa/202210-27
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4TZF6QRJIDECGMEGBPXJCHZ6YC3VZ6Z/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C5VV2R4LV4T3SNQJYRLFD4C75HBDVV76/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZA63DWRW7HROTVBNRIPBJQWBYIYAQMEW/

Match rules

CPE URI Source package Min version Max version

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
open-vm-tools 3.16-community 12.1.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
open-vm-tools 3.17-community 12.1.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed