suse · CVE-2015-5191

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-5191 severity moderate: SUSE including 94 source package names (libvmtools-devel, libvmtools-devel-10.1.0-1.1, …), 160 product×package rows across 59 product lines (HPE Helion OpenStack 8, SUSE Linux Enterprise Desktop 12 SP1, … (59 product lines)): Fixed 125, Known Not Affected 35.

Description:

VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H