CVE-2017-15884: Race Condition
Published Oct 31, 2017
·Updated
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.
Affected Software
1 affected component
HashiCorp Vagrant VMware Fusion=5.0.0
Event History
Oct 31, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15884?
CVE-2017-15884 has a high severity level due to the potential for local privilege escalation to root.
2
How do I fix CVE-2017-15884?
The best way to fix CVE-2017-15884 is to upgrade to the latest version of the HashiCorp Vagrant VMware Fusion plugin beyond 5.0.0.
3
Who is affected by CVE-2017-15884?
CVE-2017-15884 affects users of the HashiCorp Vagrant VMware Fusion plugin version 5.0.0.
4
What type of attack is possible with CVE-2017-15884?
CVE-2017-15884 allows local attackers or malware to silently subvert the plugin update process.
5
What impact does CVE-2017-15884 have on my system?
CVE-2017-15884 can lead to unauthorized root access, compromising the integrity and security of the system.