CVE-2017-7642

Published: Aug 2, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20170717 CVE-2017-7642 Local root privesc in Hashicorp vagrant-vmware-fusion <= 4.0.20

mailing-list

x_refsource_FULLDISC

https://github.com/hashicorp/vagrant-plugin-changelog/blob/master/vagrant-vmware-changelog.md

x_refsource_CONFIRM

42334

exploit

x_refsource_EXPLOIT-DB

https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4020.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-7642

Description

Affected Products

References