CVE-2018-6964 VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow u...
HighCVSS 7.8
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on a Linux machine where Horizon Client is installed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware horizon client | >= 4.0.0, < 4.8.0 | 4.8.0 |
| VMware Horizon Client for Linux | = 4.x before 4.8.0 and prior | No fix listed |
References
- 104315 third-party-advisory vdb-entry
- 1040989 third-party-advisory vdb-entry
- www.vmware.com vendor-advisory