VMWare Workstation On Linux Privilege Escalation
Posted by deepcore on May 23, 2017 – 12:20 pm
This vulnerability permits an unprivileged user on a Linux machine on which VMWare Workstation is installed to gain root privileges. The issue is that, for VMs with audio, the privileged VM host process loads libasound, which parses ALSA configuration files, including one at ~/.asoundrc. libasound is not designed to run in a setuid context and deliberately permits loading arbitrary shared libraries via dlopen().
Post a reply
You must be logged in to post a comment.