CVE Listesine Dön
CVE-2025-41244 CISA KEV · Aktif Sömürülüyor

open-vm-tools: Local privilege escalation in open-vm-tools

CVSS Skor

7.8

EPSS İhtimal

%8.4

Risk Skoru

1.3

Yayın

1 yıl önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline
Resmî yama doğrulandı

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2025-41244 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A flaw was found in VMWare open-vm-tools. A malicious actor with non-administrative privileges on a guest Virtual Machine (VM) could exploit this vulnerability to gain root privileges on the VM. The issue lies in the service-discovery plugin logic, which can execute attacker-controlled binaries from writable paths such as /tmp. Exploitation requires the open-vm-tools-sdmp package to be installed and guest service discovery to be enabled.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2025-41244 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1Red HatAppStream-10.0.Z:open-vm-tools-0:12.5.0-1.el10_0.1.aarch64 İncele
2Red HatAppStream-10.0.Z:open-vm-tools-0:12.5.0-1.el10_0.1.src İncele
3Red HatAppStream-10.0.Z:open-vm-tools-0:12.5.0-1.el10_0.1.x86_64 İncele
4Red HatAppStream-10.0.Z:open-vm-tools-debuginfo-0:12.5.0-1.el10_0.1.aarch64 İncele
5Red HatAppStream-10.0.Z:open-vm-tools-debuginfo-0:12.5.0-1.el10_0.1.x86_64 İncele
6Red HatAppStream-10.0.Z:open-vm-tools-debugsource-0:12.5.0-1.el10_0.1.aarch64 İncele
7Red HatAppStream-10.0.Z:open-vm-tools-debugsource-0:12.5.0-1.el10_0.1.x86_64 İncele
8Red HatAppStream-10.0.Z:open-vm-tools-desktop-0:12.5.0-1.el10_0.1.aarch64 İncele
9Red HatAppStream-10.0.Z:open-vm-tools-desktop-0:12.5.0-1.el10_0.1.x86_64 İncele
10Red HatAppStream-10.0.Z:open-vm-tools-desktop-debuginfo-0:12.5.0-1.el10_0.1.aarch64 İncele
11Red HatAppStream-10.0.Z:open-vm-tools-desktop-debuginfo-0:12.5.0-1.el10_0.1.x86_64 İncele
12Red HatAppStream-10.0.Z:open-vm-tools-salt-minion-0:12.5.0-1.el10_0.1.x86_64 İncele
13Red HatAppStream-10.0.Z:open-vm-tools-sdmp-0:12.5.0-1.el10_0.1.x86_64 İncele
14Red HatAppStream-10.0.Z:open-vm-tools-sdmp-debuginfo-0:12.5.0-1.el10_0.1.aarch64 İncele
15Red HatAppStream-10.0.Z:open-vm-tools-sdmp-debuginfo-0:12.5.0-1.el10_0.1.x86_64 İncele
16Red HatAppStream-10.0.Z:open-vm-tools-test-0:12.5.0-1.el10_0.1.aarch64 İncele
17Red HatAppStream-10.0.Z:open-vm-tools-test-0:12.5.0-1.el10_0.1.x86_64 İncele
18Red HatAppStream-10.0.Z:open-vm-tools-test-debuginfo-0:12.5.0-1.el10_0.1.aarch64 İncele
19Red HatAppStream-10.0.Z:open-vm-tools-test-debuginfo-0:12.5.0-1.el10_0.1.x86_64 İncele
20Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-0:12.3.5-2.el8_10.1.src İncele
21Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-0:12.3.5-2.el8_10.1.x86_64 İncele
22Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-debuginfo-0:12.3.5-2.el8_10.1.x86_64 İncele
23Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-debugsource-0:12.3.5-2.el8_10.1.x86_64 İncele
24Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-desktop-0:12.3.5-2.el8_10.1.x86_64 İncele
25Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-desktop-debuginfo-0:12.3.5-2.el8_10.1.x86_64 İncele
26Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-salt-minion-0:12.3.5-2.el8_10.1.x86_64 İncele
27Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-sdmp-0:12.3.5-2.el8_10.1.x86_64 İncele
28Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-sdmp-debuginfo-0:12.3.5-2.el8_10.1.x86_64 İncele
29Red HatAppStream-8.10.0.Z.MAIN.EUS:open-vm-tools-test-debuginfo-0:12.3.5-2.el8_10.1.x86_64 İncele
30Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-0:11.2.0-2.el8_4.5.src İncele
31Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-0:11.2.0-2.el8_4.5.x86_64 İncele
32Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
33Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-debugsource-0:11.2.0-2.el8_4.5.x86_64 İncele
34Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-desktop-0:11.2.0-2.el8_4.5.x86_64 İncele
35Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-desktop-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
36Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-sdmp-0:11.2.0-2.el8_4.5.x86_64 İncele
37Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-sdmp-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
38Red HatAppStream-8.4.0.Z.AUS:open-vm-tools-test-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
39Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-0:11.2.0-2.el8_4.5.src İncele
40Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-0:11.2.0-2.el8_4.5.x86_64 İncele
41Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
42Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-debugsource-0:11.2.0-2.el8_4.5.x86_64 İncele
43Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-desktop-0:11.2.0-2.el8_4.5.x86_64 İncele
44Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-desktop-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
45Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-sdmp-0:11.2.0-2.el8_4.5.x86_64 İncele
46Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-sdmp-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
47Red HatAppStream-8.4.0.Z.EUS.EXTENSION:open-vm-tools-test-debuginfo-0:11.2.0-2.el8_4.5.x86_64 İncele
48Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-0:11.3.5-1.el8_6.6.src İncele
49Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-0:11.3.5-1.el8_6.6.x86_64 İncele
50Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
51Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-debugsource-0:11.3.5-1.el8_6.6.x86_64 İncele
52Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-desktop-0:11.3.5-1.el8_6.6.x86_64 İncele
53Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-desktop-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
54Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-sdmp-0:11.3.5-1.el8_6.6.x86_64 İncele
55Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-sdmp-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
56Red HatAppStream-8.6.0.Z.AUS:open-vm-tools-test-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
57Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-0:11.3.5-1.el8_6.6.src İncele
58Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-0:11.3.5-1.el8_6.6.x86_64 İncele
59Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
60Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-debugsource-0:11.3.5-1.el8_6.6.x86_64 İncele
61Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-desktop-0:11.3.5-1.el8_6.6.x86_64 İncele
62Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-desktop-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
63Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-sdmp-0:11.3.5-1.el8_6.6.x86_64 İncele
64Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-sdmp-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
65Red HatAppStream-8.6.0.Z.E4S:open-vm-tools-test-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
66Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-0:11.3.5-1.el8_6.6.src İncele
67Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-0:11.3.5-1.el8_6.6.x86_64 İncele
68Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
69Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-debugsource-0:11.3.5-1.el8_6.6.x86_64 İncele
70Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-desktop-0:11.3.5-1.el8_6.6.x86_64 İncele
71Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-desktop-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
72Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-sdmp-0:11.3.5-1.el8_6.6.x86_64 İncele
73Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-sdmp-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
74Red HatAppStream-8.6.0.Z.TUS:open-vm-tools-test-debuginfo-0:11.3.5-1.el8_6.6.x86_64 İncele
75Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-0:12.1.5-2.el8_8.5.src İncele
76Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-0:12.1.5-2.el8_8.5.x86_64 İncele
77Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
78Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-debugsource-0:12.1.5-2.el8_8.5.x86_64 İncele
79Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-desktop-0:12.1.5-2.el8_8.5.x86_64 İncele
80Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-desktop-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
81Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-salt-minion-0:12.1.5-2.el8_8.5.x86_64 İncele
82Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-sdmp-0:12.1.5-2.el8_8.5.x86_64 İncele
83Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-sdmp-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
84Red HatAppStream-8.8.0.Z.E4S:open-vm-tools-test-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
85Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-0:12.1.5-2.el8_8.5.src İncele
86Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-0:12.1.5-2.el8_8.5.x86_64 İncele
87Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
88Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-debugsource-0:12.1.5-2.el8_8.5.x86_64 İncele
89Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-desktop-0:12.1.5-2.el8_8.5.x86_64 İncele
90Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-desktop-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
91Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-salt-minion-0:12.1.5-2.el8_8.5.x86_64 İncele
92Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-sdmp-0:12.1.5-2.el8_8.5.x86_64 İncele
93Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-sdmp-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
94Red HatAppStream-8.8.0.Z.TUS:open-vm-tools-test-debuginfo-0:12.1.5-2.el8_8.5.x86_64 İncele
95Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-0:11.3.5-1.el9_0.6.aarch64 İncele
96Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-0:11.3.5-1.el9_0.6.src İncele
97Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-0:11.3.5-1.el9_0.6.x86_64 İncele
98Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-debuginfo-0:11.3.5-1.el9_0.6.aarch64 İncele
99Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-debuginfo-0:11.3.5-1.el9_0.6.x86_64 İncele
100Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-debugsource-0:11.3.5-1.el9_0.6.aarch64 İncele
101Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-debugsource-0:11.3.5-1.el9_0.6.x86_64 İncele
102Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-desktop-0:11.3.5-1.el9_0.6.aarch64 İncele
103Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-desktop-0:11.3.5-1.el9_0.6.x86_64 İncele
104Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-desktop-debuginfo-0:11.3.5-1.el9_0.6.aarch64 İncele
105Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-desktop-debuginfo-0:11.3.5-1.el9_0.6.x86_64 İncele
106Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-sdmp-0:11.3.5-1.el9_0.6.x86_64 İncele
107Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-sdmp-debuginfo-0:11.3.5-1.el9_0.6.aarch64 İncele
108Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-sdmp-debuginfo-0:11.3.5-1.el9_0.6.x86_64 İncele
109Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-test-0:11.3.5-1.el9_0.6.aarch64 İncele
110Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-test-0:11.3.5-1.el9_0.6.x86_64 İncele
111Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-test-debuginfo-0:11.3.5-1.el9_0.6.aarch64 İncele
112Red HatAppStream-9.0.0.Z.E4S:open-vm-tools-test-debuginfo-0:11.3.5-1.el9_0.6.x86_64 İncele
113Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-0:12.1.5-1.el9_2.5.aarch64 İncele
114Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-0:12.1.5-1.el9_2.5.src İncele
115Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-0:12.1.5-1.el9_2.5.x86_64 İncele
116Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-debuginfo-0:12.1.5-1.el9_2.5.aarch64 İncele
117Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-debuginfo-0:12.1.5-1.el9_2.5.x86_64 İncele
118Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-debugsource-0:12.1.5-1.el9_2.5.aarch64 İncele
119Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-debugsource-0:12.1.5-1.el9_2.5.x86_64 İncele
120Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-desktop-0:12.1.5-1.el9_2.5.aarch64 İncele
121Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-desktop-0:12.1.5-1.el9_2.5.x86_64 İncele
122Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-desktop-debuginfo-0:12.1.5-1.el9_2.5.aarch64 İncele
123Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-desktop-debuginfo-0:12.1.5-1.el9_2.5.x86_64 İncele
124Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-salt-minion-0:12.1.5-1.el9_2.5.x86_64 İncele
125Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-sdmp-0:12.1.5-1.el9_2.5.x86_64 İncele
126Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-sdmp-debuginfo-0:12.1.5-1.el9_2.5.aarch64 İncele
127Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-sdmp-debuginfo-0:12.1.5-1.el9_2.5.x86_64 İncele
128Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-test-0:12.1.5-1.el9_2.5.aarch64 İncele
129Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-test-0:12.1.5-1.el9_2.5.x86_64 İncele
130Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-test-debuginfo-0:12.1.5-1.el9_2.5.aarch64 İncele
131Red HatAppStream-9.2.0.Z.E4S:open-vm-tools-test-debuginfo-0:12.1.5-1.el9_2.5.x86_64 İncele
132Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-0:12.3.5-2.el9_4.1.aarch64 İncele
133Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-0:12.3.5-2.el9_4.1.src İncele
134Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-0:12.3.5-2.el9_4.1.x86_64 İncele
135Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-debuginfo-0:12.3.5-2.el9_4.1.aarch64 İncele
136Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-debuginfo-0:12.3.5-2.el9_4.1.x86_64 İncele
137Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-debugsource-0:12.3.5-2.el9_4.1.aarch64 İncele
138Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-debugsource-0:12.3.5-2.el9_4.1.x86_64 İncele
139Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-desktop-0:12.3.5-2.el9_4.1.aarch64 İncele
140Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-desktop-0:12.3.5-2.el9_4.1.x86_64 İncele
141Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-desktop-debuginfo-0:12.3.5-2.el9_4.1.aarch64 İncele
142Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-desktop-debuginfo-0:12.3.5-2.el9_4.1.x86_64 İncele
143Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-salt-minion-0:12.3.5-2.el9_4.1.x86_64 İncele
144Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-sdmp-0:12.3.5-2.el9_4.1.x86_64 İncele
145Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-sdmp-debuginfo-0:12.3.5-2.el9_4.1.aarch64 İncele
146Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-sdmp-debuginfo-0:12.3.5-2.el9_4.1.x86_64 İncele
147Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-test-0:12.3.5-2.el9_4.1.aarch64 İncele
148Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-test-0:12.3.5-2.el9_4.1.x86_64 İncele
149Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-test-debuginfo-0:12.3.5-2.el9_4.1.aarch64 İncele
150Red HatAppStream-9.4.0.Z.EUS:open-vm-tools-test-debuginfo-0:12.3.5-2.el9_4.1.x86_64 İncele
151Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-0:12.5.0-1.el9_6.2.aarch64 İncele
152Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-0:12.5.0-1.el9_6.2.src İncele
153Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-0:12.5.0-1.el9_6.2.x86_64 İncele
154Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-debuginfo-0:12.5.0-1.el9_6.2.aarch64 İncele
155Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-debuginfo-0:12.5.0-1.el9_6.2.x86_64 İncele
156Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-debugsource-0:12.5.0-1.el9_6.2.aarch64 İncele
157Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-debugsource-0:12.5.0-1.el9_6.2.x86_64 İncele
158Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-desktop-0:12.5.0-1.el9_6.2.aarch64 İncele
159Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-desktop-0:12.5.0-1.el9_6.2.x86_64 İncele
160Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-desktop-debuginfo-0:12.5.0-1.el9_6.2.aarch64 İncele
161Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-desktop-debuginfo-0:12.5.0-1.el9_6.2.x86_64 İncele
162Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-salt-minion-0:12.5.0-1.el9_6.2.x86_64 İncele
163Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-sdmp-0:12.5.0-1.el9_6.2.x86_64 İncele
164Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-sdmp-debuginfo-0:12.5.0-1.el9_6.2.aarch64 İncele
165Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-sdmp-debuginfo-0:12.5.0-1.el9_6.2.x86_64 İncele
166Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-test-0:12.5.0-1.el9_6.2.aarch64 İncele
167Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-test-0:12.5.0-1.el9_6.2.x86_64 İncele
168Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-test-debuginfo-0:12.5.0-1.el9_6.2.aarch64 İncele
169Red HatAppStream-9.6.0.Z.MAIN.EUS:open-vm-tools-test-debuginfo-0:12.5.0-1.el9_6.2.x86_64 İncele
170broadcomVMware Aria Operations and VMware Tools İncele
Total Affected Vendor: 2|Products: 170

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Etkilenmiyor

Red Hat VEX kaydına göre bu ürün etkilenmiyor.

Red Hat düzeltmeleri

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8cvss_v3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HRed Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama doğrulandı

18 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

There are two main ways to eliminate the risk of this vulnerability: 1) Temporary - Disable the guest service discovery features: Disable the servicediscovery plugin in the config or by running the command `vmware-toolbox-cmd config set servicediscovery disabled true` then restart the system. 2) More permanent - Uninstall `open-vm-tools-sdmp` then restart the system.

reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-41244 is associated with the following CWEs:

CWE-280: Common Weakness Enumeration Entry CWE-280

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-41244 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimYerel erişim
YetkiDüşük
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisoryRHBZ#2397752vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2025-41244vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2025-41244vendor-advisoryhttps://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/vendor-advisoryhttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patch

CVSS Vektör Radar Grafiği

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal (Yerel)
Attack ComplexityLow (Düşük)
Privileges RequiredLow (Düşük Yetki)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)High (Yüksek)

Yama doğrulandı

18 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Üreticiyi takip et

RH
Red Hat logo
Red Hat
B
broadcom logo
broadcom

Zafiyet Türü (CWE & CAPEC)

CWE-280

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-41244"