CVE-2015-5191
Fixed in a distro release EPSS <1%
VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Products: VMware Tools
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | open-vm-tools | 2:10.1.5-5055683-5 |
| Debian 13 | open-vm-tools | 2:10.1.5-5055683-5 |
| Debian 14 | open-vm-tools | 2:10.1.5-5055683-5 |
| SUSE Linux Enterprise Desktop 12 SP1 | open-vm-tools | 10.1.0-5.3.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | open-vm-tools | 10.1.0-8.1 |
| SUSE Linux Enterprise Server 11 SP4 | open-vm-tools | 10.1.0-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | open-vm-tools | 10.1.0-5.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | open-vm-tools | 10.1.0-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | open-vm-tools | 10.1.0-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | open-vm-tools | 10.1.0-5.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | open-vm-tools | 10.1.0-8.1 |
| Ubuntu 16.04 LTS | open-vm-tools | 2:10.2.0-3~ubuntu0.16.04.1 |
| openSUSE Tumbleweed | open-vm-tools | 10.1.0-1.1 |