Vulnerability in Linux Kernel
CVE-2023-20900
A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.015 (73.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 74th percentile — 73.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.015 · change: +0.002
Affected products
- Linux Kernel
- Microsoft Windows
- NetApp Ontap Select Deploy Administration Utility
- VMware Open Vm Tools
- VMware Tools
- Debian Linux — versions 10.0, 11.0, 12.0
- Fedoraproject Fedora — versions 37, 38, 39
- VMware Tools — versions 12.x.x, 11.x.x, 10.3.x
- VMware Tools (Open-Vm-Tools) — versions 12.x.x, 11.x.x, 10.3.x
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.vmware.com/security/advisories/VMSA-2023-0019.html (Patch, Vendor Advisory)
- www.openwall.com/lists/oss-security/2023/08/31/1 (Mailing List, Third Party Advisory)
- www.debian.org/security/2023/dsa-5493 (Third Party Advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (Mailing List)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (Mailing List)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (Mailing List)
- lists.debian.org/debian-lts-announce/2023/10/msg00000.html (Mailing List)
- security.netapp.com/advisory/ntap-20231013-0002/ (Third Party Advisory)
- www.openwall.com/lists/oss-security/2023/10/27/1 (Patch, Mailing List)
Frequently asked questions
- What is CVE-2023-20900?
- CVE-2023-20900 is a high-severity vulnerability in Linux Kernel, classified under Authentication Bypass by Capture-replay. CVSS score: 7.1/10. Published 2023-08-31.
- How severe is CVE-2023-20900?
- High severity. CVSS v3 base score is 7.1 out of 10.
- Is CVE-2023-20900 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.