This article provides information on how to mitigate the CVE-2023-34057 vulnerability.

→ Applies to: VMware Tools (from 10.3.0 to 12.1.0 included)

Vulnerability description

VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine.

SOURCES
NIST (https://nvd.nist.gov/vuln/detail/CVE-2023-34057)
VMware (https://www.vmware.com/security/advisories/VMSA-2023-0024.html)

Solution

Update VMware Tools with a not affected version (12.1.1 and above).