Lucene search

K
oraclelinuxOracleLinuxELSA-2022-6381
HistorySep 07, 2022 - 12:00 a.m.

open-vm-tools security update

2022-09-0700:00:00
linux.oracle.com
30

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

[11.0.5-3.0.1]

  • fix spaces in vmware udev rule for scsi devices
    [Orabug: 24461968]
  • Fix vmware udev rule in 99-vmware-scsi-timeout.rules file.
    [Orabug: 22815019]
  • Increase timeout for scsi devices on VMWare guests by adding a udev rule.
  • Created a new file 99-vmware-scsi-timeout.rules
  • Modified spec file to install this new file.
    [Orabug: 21819156]
    [11.0.5-3.el7_9.4]
  • ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
  • Resolves: bz#2119310
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H