CVE-2017-16512: Race Condition
The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16512?
CVE-2017-16512 has a medium severity score due to its potential to allow local users to escalate privileges.
How do I fix CVE-2017-16512?
To fix CVE-2017-16512, update HashiCorp Vagrant VMware Fusion to version 5.0.5 or later.
Who is affected by CVE-2017-16512?
Local users running HashiCorp Vagrant VMware Fusion versions 5.0.2 through 5.0.4 are affected by CVE-2017-16512.
What are the risks associated with CVE-2017-16512?
The risks associated with CVE-2017-16512 include local privilege escalation which could lead to unauthorized access to system resources.
How was CVE-2017-16512 discovered?
CVE-2017-16512 was discovered during a review of the vagrant update process, revealing vulnerabilities in handling update requests.