CVE-2015-5191

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of this issue may result in a local privilege escalation. CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Metrics

CVSS 3.0 6.7/10CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
VMware	VMware Tools	VMware Tools prior to 10.0.9

References

http://www.securityfocus.com/bid/100011Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039013Third Party Advisory, VDB Entry
https://www.vmware.com/security/advisories/VMSA-2017-0013.htmlVendor Advisory
http://www.securityfocus.com/bid/100011Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039013Third Party Advisory, VDB Entry
https://www.vmware.com/security/advisories/VMSA-2017-0013.htmlVendor Advisory

Timeline

Published: Jul 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-51947.5The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd cr CVE-2015-51957.5ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted stati CVE-2015-51987.2libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related t CVE-2015-51997.2Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU_DRIVER environment CVE-2015-52006.3The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary file CVE-2015-52017.5VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.CVE-2015-52035.5Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (cr CVE-2015-52044.3CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remot CVE-2015-52069.8Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attac CVE-2015-52075.3Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources CVE-2015-52084.4Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.CVE-2015-52097.5Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings