A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tools | Vmware | 10.3.0 (including) | 12.2.5 (excluding) |
| Red Hat Enterprise Linux 7 | RedHat | open-vm-tools-0:11.0.5-3.el7_9.6 | * |
| Red Hat Enterprise Linux 8 | RedHat | open-vm-tools-0:12.1.5-2.el8_8 | * |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | RedHat | open-vm-tools-0:11.0.0-4.el8_2.2 | * |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | RedHat | open-vm-tools-0:11.0.0-4.el8_2.2 | * |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | RedHat | open-vm-tools-0:11.0.0-4.el8_2.2 | * |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | RedHat | open-vm-tools-0:11.2.0-2.el8_4.2 | * |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | RedHat | open-vm-tools-0:11.2.0-2.el8_4.2 | * |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | RedHat | open-vm-tools-0:11.2.0-2.el8_4.2 | * |
| Red Hat Enterprise Linux 8.6 Extended Update Support | RedHat | open-vm-tools-0:11.3.5-1.el8_6.2 | * |
| Red Hat Enterprise Linux 9 | RedHat | open-vm-tools-0:12.1.5-1.el9_2.1 | * |
| Red Hat Enterprise Linux 9.0 Extended Update Support | RedHat | open-vm-tools-0:11.3.5-1.el9_0.2 | * |
| Open-vm-tools | Ubuntu | bionic | * |
| Open-vm-tools | Ubuntu | esm-infra/bionic | * |
| Open-vm-tools | Ubuntu | esm-infra/xenial | * |
| Open-vm-tools | Ubuntu | focal | * |
| Open-vm-tools | Ubuntu | jammy | * |
| Open-vm-tools | Ubuntu | kinetic | * |
| Open-vm-tools | Ubuntu | lunar | * |
| Open-vm-tools | Ubuntu | trusty | * |
| Open-vm-tools | Ubuntu | xenial | * |