{
  "cves": [
    "CVE-2023-20867"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "LOW"
  },
  "description": "[11.0.5-3.0.1]\n- fix spaces in vmware udev rule for scsi devices\n  [Orabug: 24461968]\n- Fix vmware udev rule in 99-vmware-scsi-timeout.rules file.\n  [Orabug: 22815019]\n- Increase timeout for scsi devices on VMWare guests by adding a udev rule.\n- Created a new file 99-vmware-scsi-timeout.rules\n- Modified spec file to install this new file.\n  [Orabug: 21819156]\n\n[11.0.5-3.el7_9.6]\n- ovt-Remove-some-dead-code.patch [bz#2215562]\n- Resolves: bz#2215562\n  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])\n\n[11.0.5-3.el7_9.5]\n- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]\n- Resolves: bz#1880404\n  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')\n- Resolves: bz#1994590\n  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)",
  "id": "ELSA-2023-3944",
  "ovalId": "oval:com.oracle.elsa:def:20233944",
  "source": "oracle_linux",
  "title": "ELSA-2023-3944:  open-vm-tools security and bug fix update (LOW)",
  "url": "https://linux.oracle.com/errata/ELSA-2023-3944.html"
}