Linux · Security advisory · September 26, 2023

RLSA-2023:5312: open-vm-tools security update

RLSA-2023:5312, released September 26, 2023, fixes 1 CVE in open-vm-tools (version 0:12.1.5-2.el8_8.3). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0148
73rd percentile

Fixed package versions

ProductReleaseFixed in
open-vm-toolsrocky 80:12.1.5-2.el8_8.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-20900 open-vm-tools: A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsp... 7.5 0.0148 None reported
Showing 1 to 1 of 1 1