CVE-2023-34059
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput …
Published: 2023-10-27 · CVSS: 7.4 · CVSS 3.1
open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7