CVE-2017-16777

If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake…

published November 16, 2017

CVSS
—
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00984 · 62.0th percentile
Published
2017-11-16T15:00Z
EPSS history
Timeline
  • 16 NOV 15:00Z
    If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake…
    cvelistv5