/dev/uinput file descriptor allowing them to simulate user inputs.
Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3646-1 | open-vm-tools security update |
Debian DSA |
DSA-5543-1 | open-vm-tools security update |
EUVD |
EUVD-2023-38173 | open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs. |
Ubuntu USN |
USN-6463-1 | Open VM Tools vulnerabilities |
Ubuntu USN |
USN-6463-2 | Open VM Tools vulnerabilities |
Ubuntu USN |
USN-7714-1 | Open VM Tools vulnerabilities |
Thu, 06 Mar 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-404 | |
| References |
| |
| Metrics |
ssvc
|
Status: PUBLISHED
Assigner: vmware
Published:
Updated: 2025-03-06T15:39:21.712Z
Reserved: 2023-05-25T17:21:56.204Z
Link: CVE-2023-34059
Updated: 2024-08-02T16:01:53.454Z
Status : Modified
Published: 2023-10-27T05:15:39.013
Modified: 2025-03-06T16:15:42.033
Link: CVE-2023-34059
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Ubuntu USN