Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-16777
7.2
HIGHCVSS v2
Published
November 16, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and exploit the suid sudo helper in order to escalate to root.
hashicorp/vagrant
GitHubVagrant is a tool for building and distributing development environments.
GitHubVagrant is a tool for building and distributing development environments.= 5.0.3NVD