High severity7.8NVD Advisory· Published Mar 29, 2018· Updated Jun 17, 2026
CVE-2017-16512
CVE-2017-16512
Description
The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3>=5.0.2,<=5.0.4+ 2 more
- (no CPE)range: >=5.0.2,<=5.0.4
- cpe:2.3:a:hashicorp:vagrant_vmware_fusion:*:*:*:*:*:*:*:*range: >=5.0.2,<=5.0.4
- (no CPE)range: 5.0.2 - 5.0.4
Patches
Vulnerability mechanics
References
1- m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.