CVE-2023-34059

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs.

• CWE-404

• http://www.openwall.com/lists/oss-security/2023/10/27/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/10/27/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/11/26/1
• http://www.openwall.com/lists/oss-security/2023/11/27/1
• https://lists.debian.org/debian-lts-announce/2023/11/msg00002.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/
• https://www.debian.org/security/2023/dsa-5543Third Party Advisory
• https://www.vmware.com/security/advisories/VMSA-2023-0024.htmlNot Applicable
• http://www.openwall.com/lists/oss-security/2023/10/27/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/10/27/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/11/26/1
• http://www.openwall.com/lists/oss-security/2023/11/27/1
• https://lists.debian.org/debian-lts-announce/2023/11/msg00002.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLTKVTRKQW2GD2274H3UOW6XU4E62GSK/
• https://www.debian.org/security/2023/dsa-5543Third Party Advisory
• https://www.vmware.com/security/advisories/VMSA-2023-0024.htmlNot Applicable
• https://www.openwall.com/lists/oss-security/2023/10/27/3

Published

Oct 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34053In Spring Framework versions 6.0.0 - 6.0.13, it is possible …7.5
• CVE-2023-34054 In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.1…7.5
• CVE-2023-34055In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1…6.5
• CVE-2023-34056vCenter Server contains a partial information disclosure vul…4.3
• CVE-2023-34057VMware Tools contains a local privilege escalation vulnerabi…7.8
• CVE-2023-34058VMware Tools contains a SAML token signature bypass vulnerab…7.5
• CVE-2023-3406Path Traversal issue in M-Files Classic Web versions below 2…6.5
• CVE-2023-34060VMware Cloud Director Appliance contains an authentication b…9.8
• CVE-2023-34061Cloud Foundry routing release versions from v0.163.0 to v0.2…7.5
• CVE-2023-34062In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13…7.5
• CVE-2023-34063Aria Automation contains a Missing Access Control vulnerabil…8.3
• CVE-2023-34064Workspace ONE Launcher contains a Privilege Escalation Vulne…4.6