CVE-2015-5191 Race condition in VMware Tools
Local attackers can exploit file system races in VMware Tools to achieve privilege escalation via hard-coded temporary paths.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2015-5191?
CVE-2015-5191 is a medium-severity vulnerability in VMware Tools, published on 28 Jul 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-362
Which versions are affected by CVE-2015-5191?
It affects 1 product.
Linux distribution packages (9)
open-vm-tools SUSE:Linux Enterprise Desktop 12 SP1 | All versions | 10.1.0-5.3.1 |
open-vm-tools SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 10.1.0-8.1 |
open-vm-tools SUSE:Linux Enterprise Server 11 SP4 | All versions | 10.1.0-7.1 |
open-vm-tools SUSE:Linux Enterprise Server 12 SP1 | All versions | 10.1.0-5.3.1 |
open-vm-tools SUSE:Linux Enterprise Server 12 SP2 | All versions | 10.1.0-8.1 |
open-vm-tools SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 10.1.0-7.1 |
open-vm-tools SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 10.1.0-5.3.1 |
open-vm-tools SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 10.1.0-8.1 |
open-vm-tools openSUSE:Tumbleweed | All versions | 10.1.0-1.1 |
Products include Vmware Tools.
How do I fix CVE-2015-5191?
Upgrade to a fixed version.
Is CVE-2015-5191 being exploited?
There is no known exploitation of CVE-2015-5191 in the wild and no public exploit code.
Other vulnerabilities in VMware Tools
Sources
Also known as DEBIAN-CVE-2015-5191, GHSA-4vr2-36wr-v82r, MGASA-2017-0354, SUSE-SU-2017:0701-1, SUSE-SU-2017:0702-1, SUSE-SU-2017:0705-1 and 2 more.