# CVE-2023-20867: open-vm-tools: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the...

CVE-2023-20867 is fixed in 12 products on 1 platform, first by open-vm-tools 2:11.0.5-4ubuntu0.18.04.3+esm1, released June 12, 2023. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on June 23, 2023. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/cve/CVE-2023-20867
- Priority: Patch now
- CVSS: 3.9 (low)
- EPSS: 0.1364
- CISA KEV: listed Jun 23, 2023, federal due date Jul 14, 2023
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 12, 2023

## Description

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | open-vm-tools Debian 11.6 (bullseye) | 2:11.2.5-2+deb11u2 | [DSA-5493-1](https://patchblox.com/security/data/fix/linux/dsa-5493-1.md) | Sep 10, 2023 |
| Linux | open-vm-tools Debian 12.15 (bookworm) | 2:12.2.0-1+deb12u1 | [DSA-5493-1](https://patchblox.com/security/data/fix/linux/dsa-5493-1.md) | Sep 10, 2023 |
| Linux | open-vm-tools Debian 13.5 (trixie) | 2:12.2.5-1 | [DEBIAN-CVE-2023-20867](https://patchblox.com/security/data/fix/linux/debian-cve-2023-20867.md) | Jun 13, 2023 |
| Linux | open-vm-tools Debian 14 | 2:12.2.5-1 | [DEBIAN-CVE-2023-20867](https://patchblox.com/security/data/fix/linux/debian-cve-2023-20867.md) | Jun 13, 2023 |
| Linux | open-vm-tools RHEL 8 | 0:12.1.5-2.el8_8 | [RHSA-2023:3949](https://patchblox.com/security/data/fix/linux/rhsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools RHEL 9 | 0:12.1.5-1.el9_2.1 | [RHSA-2023:3948](https://patchblox.com/security/data/fix/linux/rhsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools Ubuntu 18.04.6 LTS (bionic) | 2:11.0.5-4ubuntu0.18.04.3+esm1 | [open-vm-tools 2:11.0.5-4ubuntu0.18.04.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-open-vm-tools-2-11.0.5-4ubuntu0.18.04.3-esm1.md) | Jun 12, 2023 |
| Linux | open-vm-tools Ubuntu 20.04 LTS (focal) | 2:11.3.0-2ubuntu0~ubuntu20.04.5 | [open-vm-tools 2:11.3.0-2ubuntu0~ubuntu20.04.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-open-vm-tools-2-11.3.0-2ubuntu0-ubuntu20.04.5.md) | Jun 12, 2023 |
| Linux | open-vm-tools Ubuntu 22.04.1 LTS (jammy) | 2:12.1.5-3~ubuntu0.22.04.2 | [open-vm-tools 2:12.1.5-3~ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-2-12.1.5-3-ubuntu0.22.04.2.md) | Jun 12, 2023 |
| Linux | open-vm-tools almalinux 8 | 12.1.5-2.el8_8.alma | [ALSA-2023:3949](https://patchblox.com/security/data/fix/linux/alsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools almalinux 9 | 12.1.5-1.el9_2.1.alma | [ALSA-2023:3948](https://patchblox.com/security/data/fix/linux/alsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools ol 8 | 0:12.1.5-1.0.2.el8 | [ELSA-2023-3949](https://patchblox.com/security/data/fix/linux/elsa-2023-3949.md) | Jul 7, 2023 |
| Linux | open-vm-tools ol 9 | 0:12.1.5-1.0.2.el9 | [ELSA-2023-3948](https://patchblox.com/security/data/fix/linux/elsa-2023-3948.md) | Jul 7, 2023 |
| Linux | open-vm-tools rocky 8 | 0:12.1.5-2.el8_8 | [RLSA-2023:3949](https://patchblox.com/security/data/fix/linux/rlsa-2023-3949.md) | Jul 8, 2023 |
| Linux | open-vm-tools rocky 9 | 0:12.1.5-1.el9_2.1 | [RLSA-2023:3948](https://patchblox.com/security/data/fix/linux/rlsa-2023-3948.md) | Jul 8, 2023 |
| Linux | open-vm-tools-containerinfo Ubuntu 22.04.1 LTS (jammy) | 2:12.1.5-3~ubuntu0.22.04.2 | [open-vm-tools-containerinfo 2:12.1.5-3~ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-containerinfo-2-12.1.5-3-ubuntu0.22.04.2.md) | Jun 12, 2023 |
| Linux | open-vm-tools-debuginfo amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-debugsource amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-desktop RHEL 8 | 0:12.1.5-2.el8_8 | [RHSA-2023:3949](https://patchblox.com/security/data/fix/linux/rhsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools-desktop RHEL 9 | 0:12.1.5-1.el9_2.1 | [RHSA-2023:3948](https://patchblox.com/security/data/fix/linux/rhsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-desktop Ubuntu 18.04.6 LTS (bionic) | 2:11.0.5-4ubuntu0.18.04.3+esm1 | [open-vm-tools-desktop 2:11.0.5-4ubuntu0.18.04.3+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-open-vm-tools-desktop-2-11.0.5-4ubuntu0.18.04.3-esm1.md) | Jun 12, 2023 |
| Linux | open-vm-tools-desktop Ubuntu 20.04 LTS (focal) | 2:11.3.0-2ubuntu0~ubuntu20.04.5 | [open-vm-tools-desktop 2:11.3.0-2ubuntu0~ubuntu20.04.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-open-vm-tools-desktop-2-11.3.0-2ubuntu0-ubuntu20.04.5.md) | Jun 12, 2023 |
| Linux | open-vm-tools-desktop Ubuntu 22.04.1 LTS (jammy) | 2:12.1.5-3~ubuntu0.22.04.2 | [open-vm-tools-desktop 2:12.1.5-3~ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-desktop-2-12.1.5-3-ubuntu0.22.04.2.md) | Jun 12, 2023 |
| Linux | open-vm-tools-desktop almalinux 8 | 12.1.5-2.el8_8.alma | [ALSA-2023:3949](https://patchblox.com/security/data/fix/linux/alsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools-desktop almalinux 9 | 12.1.5-1.el9_2.1.alma | [ALSA-2023:3948](https://patchblox.com/security/data/fix/linux/alsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-desktop amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-desktop ol 8 | 0:12.1.5-1.0.2.el8 | [ELSA-2023-3949](https://patchblox.com/security/data/fix/linux/elsa-2023-3949.md) | Jul 7, 2023 |
| Linux | open-vm-tools-desktop ol 9 | 0:12.1.5-1.0.2.el9 | [ELSA-2023-3948](https://patchblox.com/security/data/fix/linux/elsa-2023-3948.md) | Jul 7, 2023 |
| Linux | open-vm-tools-desktop-debuginfo amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-devel amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-salt-minion RHEL 8 | 0:12.1.5-2.el8_8 | [RHSA-2023:3949](https://patchblox.com/security/data/fix/linux/rhsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools-salt-minion RHEL 9 | 0:12.1.5-1.el9_2.1 | [RHSA-2023:3948](https://patchblox.com/security/data/fix/linux/rhsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-salt-minion Ubuntu 22.04.1 LTS (jammy) | 2:12.1.5-3~ubuntu0.22.04.2 | [open-vm-tools-salt-minion 2:12.1.5-3~ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-salt-minion-2-12.1.5-3-ubuntu0.22.04.2.md) | Jun 12, 2023 |
| Linux | open-vm-tools-salt-minion almalinux 8 | 12.1.5-2.el8_8.alma | [ALSA-2023:3949](https://patchblox.com/security/data/fix/linux/alsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools-salt-minion almalinux 9 | 12.1.5-1.el9_2.1.alma | [ALSA-2023:3948](https://patchblox.com/security/data/fix/linux/alsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-salt-minion amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-salt-minion ol 8 | 0:12.1.5-1.0.2.el8 | [ELSA-2023-3949](https://patchblox.com/security/data/fix/linux/elsa-2023-3949.md) | Jul 7, 2023 |
| Linux | open-vm-tools-salt-minion ol 9 | 0:12.1.5-1.0.2.el9 | [ELSA-2023-3948](https://patchblox.com/security/data/fix/linux/elsa-2023-3948.md) | Jul 7, 2023 |
| Linux | open-vm-tools-sdmp RHEL 8 | 0:12.1.5-2.el8_8 | [RHSA-2023:3949](https://patchblox.com/security/data/fix/linux/rhsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools-sdmp RHEL 9 | 0:12.1.5-1.el9_2.1 | [RHSA-2023:3948](https://patchblox.com/security/data/fix/linux/rhsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-sdmp Ubuntu 20.04 LTS (focal) | 2:11.3.0-2ubuntu0~ubuntu20.04.5 | [open-vm-tools-sdmp 2:11.3.0-2ubuntu0~ubuntu20.04.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-open-vm-tools-sdmp-2-11.3.0-2ubuntu0-ubuntu20.04.5.md) | Jun 12, 2023 |
| Linux | open-vm-tools-sdmp Ubuntu 22.04.1 LTS (jammy) | 2:12.1.5-3~ubuntu0.22.04.2 | [open-vm-tools-sdmp 2:12.1.5-3~ubuntu0.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-open-vm-tools-sdmp-2-12.1.5-3-ubuntu0.22.04.2.md) | Jun 12, 2023 |
| Linux | open-vm-tools-sdmp almalinux 8 | 12.1.5-2.el8_8.alma | [ALSA-2023:3949](https://patchblox.com/security/data/fix/linux/alsa-2023-3949.md) | Jun 29, 2023 |
| Linux | open-vm-tools-sdmp almalinux 9 | 12.1.5-1.el9_2.1.alma | [ALSA-2023:3948](https://patchblox.com/security/data/fix/linux/alsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-sdmp amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-sdmp ol 8 | 0:12.1.5-1.0.2.el8 | [ELSA-2023-3949](https://patchblox.com/security/data/fix/linux/elsa-2023-3949.md) | Jul 7, 2023 |
| Linux | open-vm-tools-sdmp ol 9 | 0:12.1.5-1.0.2.el9 | [ELSA-2023-3948](https://patchblox.com/security/data/fix/linux/elsa-2023-3948.md) | Jul 7, 2023 |
| Linux | open-vm-tools-sdmp-debuginfo amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-test RHEL 9 | 0:12.1.5-1.el9_2.1 | [RHSA-2023:3948](https://patchblox.com/security/data/fix/linux/rhsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-test almalinux 9 | 12.1.5-1.el9_2.1.alma | [ALSA-2023:3948](https://patchblox.com/security/data/fix/linux/alsa-2023-3948.md) | Jun 29, 2023 |
| Linux | open-vm-tools-test amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |
| Linux | open-vm-tools-test ol 9 | 0:12.1.5-1.0.2.el9 | [ELSA-2023-3948](https://patchblox.com/security/data/fix/linux/elsa-2023-3948.md) | Jul 7, 2023 |
| Linux | open-vm-tools-test-debuginfo amzn 2023 | 12.2.5-1.amzn2023 | [ALAS2023-2023-259](https://patchblox.com/security/data/fix/linux/alas2023-2023-259.md) | Jul 17, 2023 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.