CVE-2017-7642

The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable.

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.23% chance of exploitation in the next 30 days, 68th percentile

Published

2017-08-02

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://seclists.org/fulldisclosure/2017/Jul/29

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42334

Security advisories

• hashicorp/vagrant-plugin-changelog/blob/master/vagrant-vmware-changelog.md
• https://m4.rkw.io/blog/cve20177642-local-root-privesc-in-hashicorp-vagrantvmwarefusion--4…

References

• CVE Record
• NVD entry