20 Oct SANS InfoSec Handlers Diary Blog – VMware Releases Security Patches for Fusion, Workstation and Aria Operations for Logs

I recently wrote a diary on the SANS Internet Storm Center about VMware releasing security patches for their products.

Please click here to read the full diary entry. Alternatively, the full diary is reposted in full below.

VMware released advisories VMSA-2023-0021 and VMSA-2023-0022 that have been rated as important. They are as follows:

Important: VMware Aria Operations for Logs updates address multiple vulnerabilities. (CVE-2023-34051 (CVSSv3 score 8.1), CVE-2023-34052(CVSSv3 score 8.1)) [1]

Important: VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities (CVE-2023-34044 (CVSSv3 score 7.1), CVE-2023-34045 (CVSSv3 score 6.6), CVE-2023-34046 (CVSSv3 score 6.7)) [2]

[1] https://www.vmware.com/security/advisories/VMSA-2023-0021.html
[2] https://www.vmware.com/security/advisories/VMSA-2023-0022.html