Support Content Notification - Support Portal

VMSA-2021-0013:VMware Tools, VMRC and VMware App Volumes update addresses a local privilege escalation vulnerability

Product/Component

VMware

1 more products

Notification Id

23605

Last Updated

20 June 2021

Initial Publication Date

20 June 2021

Status

CLOSED

Severity

HIGH

CVSS Base Score

7.8

WorkAround

Affected CVE

CVE-2021-21999

Advisory ID: VMSA-2021-0013

CVSSv3 Range: 7.8

Issue Date:2021-06-22

Updated On: 2021-06-22 (Initial Advisory)

CVE(s): CVE-2021-21999

Synopsis: VMware Tools, VMRC and VMware App Volumes update addresses a local privilege escalation vulnerability (CVE-2021-21999)

1. Impacted Products

VMware Tools for Windows (VMware Tools)
VMware Remote Console for Windows (VMRC for Windows)
VMware App Volumes

2. Introduction

A local privilege escalation vulnerability in VMware Tools for Windows, VMRC for Windows and VMware App Volumes was privately reported to VMware. Updates are available to remediate this vulnerability in affected VMware products.

3. VMware Tools, VMRC and VMware App Volumes update addresses a local privilege escalation vulnerability (CVE-2021-21999)

Description

VMware Tools for Windows, VMRC for Windows and VMware App Volumes contain a local privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.8.

Known Attack Vectors

An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges.

Resolution

To remediate CVE-2021-21999 apply the patches listed in the 'Fixed Version' column of the 'Response Matrix' found below.

Workarounds

None.

Additional Documentation

None.

Notes

None.

Acknowledgements

VMware would like to thank Zeeshan Shaikh (@bugzzzhunter) from NotSoSecure working with Trend Micro Zero Day Initiative and Hou JingYi (@hjy79425575) of Qihoo 360 for reporting this vulnerability to us.

Response Matrix

Product	Version	Running On	CVE Identifier	CVSSv3	Severity	Fixed Version	Workarounds	Additional Documentation
VMware Tools	11.3.0	Any	CVE-2021-21999	N/A	N/A	Unaffected	N/A	N/A
VMware Tools	11.x.y	Windows	CVE-2021-21999	7.8	important	11.2.6	None	None
VMware Tools	10.x.y	Any	CVE-2021-21999	N/A	N/A	Unaffected	N/A	N/A
VMRC for Windows	12.x	Windows	CVE-2021-21999	7.8	important	12.0.1	None	None
App Volumes	4	Windows	CVE-2021-21999	7.8	important	2103	None	None
App Volumes	2.x	Windows	CVE-2021-21999	7.8	important	2.18.10	None	None