CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2023-20867

🔥 Known Exploited (CISA KEV)LOW
3.9
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-06-13
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Affected Platforms (CPE)

📦
Vmware

Tools

>= 10.3.0 and < 12.2.5
💻
Debian

Debian Linux

= 10.0= 11.0= 12.0
💻
Fedoraproject

Fedora

= 37= 38= 39

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2023/10/16/11
🔗 http://www.openwall.com/lists/oss-security/2023/10/16/2
🔗 https://lists.debian.org/debian-lts-announce/2023/08/msg00020.html
🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG/
🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W/
🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/
🔗 https://security.netapp.com/advisory/ntap-20230725-0001/
🔗 https://www.debian.org/security/2023/dsa-5493

相關資安分析文章

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

2026-07-27

全球網絡威脅情報摘要：2026 年 7 月 24 日

本期情報聚焦於 Check Point CVE-2026-16232 SmartConsole 控制平面身分驗證繞過之主動利用、俄羅斯 LAUNDRY BEAR 利用 Zimbra 漏洞進行電子郵件間諜活動，以及假冒 Claude Desktop 的惡意廣告攻擊與 Chaos 勒索軟體運作動態。

2026-07-24

全球網絡威脅情報摘要：2026 年 7 月 21 日

本期威脅情報分析 VMware vCenter、F5 BIG-IP 與 GitLab 關鍵漏洞安全修補警訊，同時彙整最新醫療與關鍵基礎設施平台遭勒索軟體攻擊之防禦防範措施。

2026-07-21

相關漏洞威脅

CVE-2026-175345.5

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist i...

CVE-2026-6601210.0

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a gen...

CVE-2026-64454

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: run gadget disconnect from sleepable suspend conte...

CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw_spinlock_t in the irq startup path s...