VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2:10.2.0-3~ubuntu0.16.04.1", "binary_name": "open-vm-tools" }, { "binary_version": "2:10.2.0-3~ubuntu0.16.04.1", "binary_name": "open-vm-tools-dbgsym" }, { "binary_version": "2:10.2.0-3~ubuntu0.16.04.1", "binary_name": "open-vm-tools-desktop" }, { "binary_version": "2:10.2.0-3~ubuntu0.16.04.1", "binary_name": "open-vm-tools-desktop-dbgsym" }, { "binary_version": "2:10.2.0-3~ubuntu0.16.04.1", "binary_name": "open-vm-tools-dev" } ] }