VMware Open-Vm-Tools vulnerabilities

2 CVEs affecting VMware Open-Vm-Tools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1143, published 2022-11-23.

More from VMware.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1681, published 2011-04-10. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. vmware-hgfsmounter in VMware Open Virtual Machine Tools (aka open-vm-tools) 8.4.2-261024 and earlier attempts to append to the /etc/mtab file without first checking whether resource limits would…
• CVE-2009-1143, published 2022-11-23. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in…