[ASA-202104-9] virtualbox: multiple issues

🗓️ 29 Apr 2021 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 234 Views

virtualbox multiple issues, high severity, upgrade to version 6.1.20-1 require

Reporter	Title	Published	Views	Family All 382
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain access to modify, add, or delete data.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	virtualbox	6.1.20-1	virtualbox-6.1.20-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-1846
oracle	www.oracle.com/security-alerts/cpuapr2021verbose.html
security	www.security.archlinux.org/CVE-2021-2145
security	www.security.archlinux.org/CVE-2021-2250
security	www.security.archlinux.org/CVE-2021-2266
security	www.security.archlinux.org/CVE-2021-2279
security	www.security.archlinux.org/CVE-2021-2280
security	www.security.archlinux.org/CVE-2021-2281
security	www.security.archlinux.org/CVE-2021-2282
security	www.security.archlinux.org/CVE-2021-2283

29 Apr 2021 00:00Current

1.9Low risk

Vulners AI Score1.9

CVSS 26.8

CVSS 3.18.2

EPSS0.0331

SSVC

virtualbox high severity multiple issues arbitrary code execution information disclosure filesystem access cve-2021-2145 cve-2021-2250 cve-2021-2266 cve-2021-2279 cve-2021-2280 cve-2021-2281