CVE-2018-6964 Privilege escalation in Horizon Client for Linux
Unprivileged users can escalate privileges to root on Linux systems via insecure SUID binary usage in VMware Horizon Client.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-6964?
CVE-2018-6964 is a high-severity vulnerability in VMware Horizon Client for Linux, published on 29 May 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed.
Which versions are affected by CVE-2018-6964?
It affects 1 product.
Products include Vmware Horizon Client.
How do I fix CVE-2018-6964?
No fix has been published for CVE-2018-6964 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6964 being exploited?
There is no known exploitation of CVE-2018-6964 in the wild and no public exploit code.
Other vulnerabilities in VMware Horizon Client for Linux
- CVE-2020-3961 Privilege escalation in VMware Horizon Client for Windows
- CVE-2019-5543 Privilege escalation in VMware Horizon Client for Windows
- CVE-2020-3991 Path traversal in VMware Horizon Client for Windows
- CVE-2021-21987 Information disclosure in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows
- CVE-2021-21988 Information disclosure in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows
Sources
Also known as GHSA-w5gh-72fc-wfgf.