{"uuid": "7a875000-7906-439a-b13f-749188392e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-4915", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_alsa_config.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Jann Horn\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in VMware Workstation Pro and\\n          Player on Linux which allows users to escalate their privileges by\\n          using an ALSA configuration file to load and execute a shared object\\n          as root when launching a virtual machine with an attached sound card.\\n\\n          This module has been tested successfully on VMware Player version\\n          12.5.0 on Debian Linux 8 Jessie.\", \"disclosure_date\": \"2017-05-22\", \"fullname\": \"exploit/linux/local/vmware_alsa_config\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"VMware Workstation ALSA Config File Local Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/vmware_alsa_config.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/local/vmware_alsa_config\", \"references\": [\"CVE-2017-4915\", \"EDB-42045\", \"BID-98566\", \"URL-https://www.securitytracker.com/id/1038525\", \"URL-https://gist.github.com/bcoles/cd26a831473088afafefc93641e184a9\", \"URL-https://www.vmware.com/security/advisories/VMSA-2017-0009.html\", \"URL-https://bugs.chromium.org/p/project-zero/issues/detail?id=1142\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Linux x86\", \"Linux x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:13.917832Z"}