DEBIAN-CVE-2023-34059

DEBIAN-CVE-2023-34059 PUBLISHED CVSS 7 HIGH

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

Risk Scores

CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:14	open-vm-tools	0, 0, 0
Debian:12	open-vm-tools	*, 0, 2:12.2.0-1
Debian:11	open-vm-tools	*, 2:11.2.5-2+deb11u1, 2:11.2.5-2+deb11u3~bpo10+1
Debian:13	open-vm-tools	0, 0, 0

Timeline

Oct 27, 2023 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-34059 advisory

Open in Interactive Console →