[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f88ZJ483eOrIxSfaa8Cy8V1qzSCMOwln4aD3XgK27hrY":3,"g5a-risk:CVE-2023-34059":181},{"success":4,"data":5,"meta":178},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":27,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":56,"references":57,"referencesCount":119,"weaknesses":120,"weaknessesCount":35,"isActivelyExploited":129,"cisaInfo":27,"otxData":27,"relatedBlogPosts":130,"seoMetadata":131,"configurations":156,"relatedVendorCves":176,"notableEvents":177},"CVE-2023-34059","What is CVE-2023-34059?","open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the \n\u002Fdev\u002Fuinput file descriptor allowing them to simulate user inputs.","open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hija...","2023-10-27T05:15:39.013","2025-03-06T16:15:42.033",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"security@vmware.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOCAL","HIGH","NONE","UNCHANGED",7.4,null,1.4,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":35,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":34,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"LOW",1,0.00402,[36,36,36,36,36,36,36],"High",[40,45,50,53],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"vmware","open_vm_tools","*","cpe:2.3:a:vmware:open_vm_tools:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":54,"criteria":55,"vulnerable":4},"12.0","cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",4,[58,65,68,71,74,78,82,85,88,91,96,98,100,102,104,106,108,110,112,114,116],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F10\u002F27\u002F2","Openwall",[62,63,64],"Mailing List","Patch","Third Party Advisory",{"url":66,"source":60,"tags":67},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F10\u002F27\u002F3",[62,64],{"url":69,"source":60,"tags":70},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F11\u002F26\u002F1",[],{"url":72,"source":60,"tags":73},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F11\u002F27\u002F1",[],{"url":75,"source":76,"tags":77},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F11\u002Fmsg00002.html","Debian",[62,64],{"url":79,"source":80,"tags":81},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FG7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2\u002F","Fedoraproject",[],{"url":83,"source":80,"tags":84},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FMQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW\u002F",[],{"url":86,"source":80,"tags":87},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FWLTKVTRKQW2GD2274H3UOW6XU4E62GSK\u002F",[],{"url":89,"source":76,"tags":90},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5543",[64],{"url":92,"source":93,"tags":94},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2023-0024.html","Vmware",[95],"Not Applicable",{"url":59,"source":60,"tags":97},[62,63,64],{"url":66,"source":60,"tags":99},[62,64],{"url":69,"source":60,"tags":101},[],{"url":72,"source":60,"tags":103},[],{"url":75,"source":76,"tags":105},[62,64],{"url":79,"source":80,"tags":107},[],{"url":83,"source":80,"tags":109},[],{"url":86,"source":80,"tags":111},[],{"url":89,"source":76,"tags":113},[64],{"url":92,"source":93,"tags":115},[95],{"url":117,"source":60,"tags":118},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F10\u002F27\u002F3",[],21,[121],{"id":122,"name":123,"description":124,"extendedDescription":125,"status":126,"abstraction":127,"structure":128},"CWE-404","Improper Resource Shutdown or Release","The product does not release or incorrectly releases a resource before it is made available for re-use.","When a resource is created or allocated, the developer is responsible for properly releasing the resource as well as accounting for all potential paths of expiration or invalidation, such as a set period of time or revocation.","Draft","Class","Simple",false,[],{"title":132,"metaDescription":133,"keywords":134,"canonicalUrl":135,"structuredData":136},"What is CVE-2023-34059? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-34059, a high severity cyber security vulnerability from 2023. open-vm-tools contains a file descriptor hijack vulnerabili...","CVE-2023-34059, CVE-2023-34059 vulnerability, CVE-2023-34059 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, vmware security, debian security, open_vm_tools vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2023-34059",{"@context":137,"@type":138,"headline":132,"description":133,"datePublished":10,"dateModified":11,"author":139,"publisher":143,"about":147,"mainEntityOfPage":151,"articleSection":154,"keywords":155},"https:\u002F\u002Fschema.org","TechArticle",{"@type":140,"name":141,"url":142},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":140,"name":141,"url":142,"logo":144},{"@type":145,"url":146},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":148,"name":6,"description":149,"additionalType":150},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":152,"@id":153},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-34059","Cybersecurity","CVE-2023-34059, CVE-2023-34059 vulnerability, CVE-2023-34059 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[157,166],{"Operator":27,"Negate":27,"Nodes":158},[159],{"Operator":160,"Negate":27,"CPEMatch":161},"OR",[162],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":164,"VersionEndExcluding":27,"VersionEndIncluding":165},"9713E664-EA87-4236-B75E-8C44D5791E70","11.0.0","12.3.0",{"Operator":27,"Negate":27,"Nodes":167},[168],{"Operator":160,"Negate":27,"CPEMatch":169},[170,172,174],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"46D69DCC-AE4D-4EA5-861C-D60951444C6C",[],[],{"lastModified":11,"cacheTime":179,"version":180},1792368459739,"2.0",{"score":182,"band":183,"action":184,"scoredAt":185},46,"Medium","Plan remediation","2026-10-16T06:59:37.586265+00:00"]