VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...
Summary
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...
Original description
The description as published by the source.
VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges may exploit this vulnerability to escalate privileges to root on the system where Fusion is installed.
Source: NIST National Vulnerability Database NVD GitHub Advisory
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
VMware Fusionには、SETUIDバイナリの操作中に発生するTOCTOU（Time-of-check Time-of-use）脆弱性が存在します。この脆弱性を悪用すると、非特権のローカルユーザーがルート権限を取得する可能性があります。セキュリティ上、重大なリスクとなるため注意が必要です。
VMware FusionにおけるTOCTOU（Time-of-check Time-of-use）脆弱性。
VMware Fusion内のSETUIDバイナリ。
非特権のローカルユーザーがルート権限を取得可能。高い重要度。
VMwareからのセキュリティアップデートを適用。
情報なし
システムログを監視し、不審な権限昇格をチェック。
References
- patch security@vmware.com
- web nvd.nist.gov
- web github.com