{"uuid": "1b07fcd8-0a2e-4c5a-8682-223ec0c3ae6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20869", "type": "seen", "source": "https://t.me/hacking_Attack/99391", "content": "Black Hat Ethical Hacking\nVMware Issues Critical Security Updates to Fix Zero-Day Vulnerabilities\n\nVMware Issues Critical Security Updates to Fix Zero-Day VulnerabilitiesPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Security Updates Virtualization software provider, VMware, has released security updates to address zero-day vulnerabilities that could potentially be used to execute code on systems running unpatched versions of the company\u2019s Workstation and Fusion software hypervisors. These two flaws were part of an exploit chain that was demonstrated by the STAR Labs team\u2019s security researchers during the second day of the Pwn2Own Vancouver 2023 hacking contest, one month ago. According to the Zero Day Initiative, vendors have 90 days to patch zero-day bugs exploited and disclosed during Pwn2Own before technical details are released.\n\nThe first vulnerability (CVE-2023-20869) is a stack-based buffer-overflow vulnerability in Bluetooth device-sharing functionality, which allows local attackers to execute code as the virtual machine\u2019s VMX process running on the host. The second bug (CVE-2023-20870) is an information disclosure weakness in the functionality for sharing host Bluetooth devices with the VM, which enables malicious actors to read privileged information contained in hypervisor memory from a VM. VMware has shared a temporary workaround for admins who cannot immediately deploy patches for the two flaws on their systems.\nSuccess! @starlabs_sg used an uninitialized variable and UAF against VMWare Workstation. They earn $80,000 and 8 Master of Pwn points, pushing the prize total for #P2OVancouver past $1,000,000. #Pwn2Own pic.twitter.com/DEjgYcmphH\n\n\u2014 Zero Day Initiative (@thezdi) March 24, 2023\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Zero-day Vulnerabilities Could Allow Attackers to Execute Code and Gain Root Access to Host OSAdditionally, the company addressed two more security flaws that impact the VMware Workstation and Fusion hosted hypervisors. CVE-2023-20871 is a high-severity VMware Fusion Raw Disk local privilege escalation vulnerability that can be abused by attackers with read/write access to the host operating system to escalate privileges and gain root access to the host OS.\n\nThe fourth bug (tracked as CVE-2023-20872) is an out-of-bounds read/write vulnerability in the SCSI CD/DVD device emulation, which impacts both Workstation and Fusion products. This can be exploited by local attackers with access to VMs with a physical CD/DVD drive attached and configured to use a virtual SCSI controller to gain code execution on the hypervisor from the VM.\nTrending: Major Cyber Attacks of 2022\nTrending: Offensive Security Tool: dontgo403 VMware Provides Temporary Workaround for Latest Vulnerability, Urges Prompt Patching for System SecurityVMware has also advised admins to remove the CD/DVD device from the virtual machine or configure the virtual machine NOT to use a virtual SCSI controller as a temporary workaround to block exploitation attempts. Last week, the company patched a critical vRealize Log Insight vulnerability that can let unauthenticated attackers gain remote execution on vulnerable appliances. In light of these findings, it is essential for companies to deploy patches promptly to ensure the security and integrity of their systems.\nTrending: Chinese hacking group APT41 caught using Google tool for data theft Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific au[...]", "creation_timestamp": "2026-09-04T15:00:05.323625Z"}