CVE-2017-16512

HIGH

Hashicorp vagrant-vmware-fusion <5.0.4 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 9.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-362
Status published
Products (1)
hashicorp/vagrant_vmware_fusion 5.0.2 - 5.0.4
Published Mar 29, 2018
Tracked Since Feb 18, 2026