Known vulnerabilities in open-vm-tools (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:open-vm-tools_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting open-vm-tools (Ubuntu package) open-vm-tools (Ubuntu package) is affected by 7 known vulnerabilities: 2 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116185 - Improper Access Control
CVE-2025-41244
CWE-284 High
No
Exploited
2:11.3.0-2ubuntu0~ubuntu20.04.8+esm1, 2:12.3.5-3~ubuntu0.22.04.3, 2:12.5.0-1ubuntu0.2, 2:12.5.0-1~ubuntu0.24.04.2 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU108928 - Improper input validation
CVE-2025-22247
CWE-20 Low
No
No
2:10.2.0-3~ubuntu0.16.04.1+esm5, 2:11.0.5-4ubuntu0.18.04.3+esm4, 2:11.3.0-2ubuntu0~ubuntu20.04.8, 2:12.3.5-3~ubuntu0.22.04.2, 2:12.4.5-1ubuntu0.1, 2:12.4.5-1~ubuntu0.24.04.2, 2:12.5.0-1ubuntu0.1 12.05.2025 SB2025051234
SB2025051306
SB2025051501
and 9 more
#VU82560 - Improper Access Control
CVE-2023-34059
CWE-284 Low
No
No
Ubuntu Pro, 2:11.3.0-2ubuntu0~ubuntu20.04.7, 2:12.1.5-3~ubuntu0.22.04.4, 2:12.1.5-3ubuntu0.23.04.3, 2:12.3.0-1ubuntu0.1 30.10.2023 SB2023103026
SB2023103031
SB2023103032
and 32 more
#VU82520 - Improper Authorization
CVE-2023-34058
CWE-285 Medium
No
No
Ubuntu Pro, 2:11.3.0-2ubuntu0~ubuntu20.04.7, 2:12.1.5-3~ubuntu0.22.04.4, 2:12.1.5-3ubuntu0.23.04.3, 2:12.3.0-1ubuntu0.1 27.10.2023 SB2023102702
SB2023103031
SB2023103032
and 33 more
#VU80188 - Cryptographic Issues
CVE-2023-20900
CWE-310 Medium
No
No
Ubuntu Pro, 2:11.3.0-2ubuntu0~ubuntu20.04.6, 2:12.1.5-3~ubuntu0.22.04.3, 2:12.1.5-3ubuntu0.23.04.2 31.08.2023 SB2023083119
SB2023083154
SB2023083155
and 38 more
#VU77208 - Improper Authentication
CVE-2023-20867
CWE-287 High
No
Exploited
Ubuntu Pro, 2:11.3.0-2ubuntu0~ubuntu20.04.5, 2:12.1.5-3~ubuntu0.22.04.2, 2:12.1.5-3ubuntu0.23.04.1 13.06.2023 SB2023061339
SB2023061449
SB2023061649
and 34 more
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676
CWE-264 Low
No
No
2:10.2.03~ubuntu0.16.04.1+esm1, 2:11.0.5-4ubuntu0.18.04.2, 2:11.3.0-2ubuntu0~ubuntu20.04.3, 2:11.3.5-1ubuntu4.1 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more