CVE-2017-16839: High severity HashiCorp Vagrant VMware Fusion vulnerability
Published Mar 29, 2018
·Updated
Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.
Affected Software
1 affected component
HashiCorp Vagrant VMware Fusion=5.0.4
Event History
Mar 29, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-16839?
CVE-2017-16839 is considered to have high severity due to its potential for privilege escalation.
2
How do I fix CVE-2017-16839?
To fix CVE-2017-16839, ensure that VMware Fusion is installed and properly configured on your system.
3
Who is affected by CVE-2017-16839?
Local users on systems running Hashicorp Vagrant VMware Fusion version 5.0.4 without VMware Fusion installed are affected by CVE-2017-16839.
4
Can CVE-2017-16839 allow remote exploitation?
No, CVE-2017-16839 is not a remote exploitation vulnerability; it requires local access to the affected system.
5
What types of systems are vulnerable to CVE-2017-16839?
Systems using Hashicorp Vagrant VMware Fusion version 5.0.4 without VMware Fusion installed are vulnerable to CVE-2017-16839.