Lucene search

Gentoo FoundationGLSA-201401-13

HistoryJan 20, 2014 - 12:00 a.m.

VirtualBox: Multiple Vulnerabilities

2014-01-2000:00:00

Gentoo Foundation

security.gentoo.org

3.5 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.2%

JSON

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in Virtualbox. Please review the CVE identifiers referenced below for details.

Impact

A local attacker in a guest virtual machine may be able to escalate privileges or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All virtualbox users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose "&gt;=app-emulation/virtualbox-4.2.22"

All virtualbox-bin users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 "&gt;=app-emulation/virtualbox-bin-4.2.22"

OSVersionArchitecturePackageVersionFilename
Gentooanyallapp-emulation/virtualbox< 4.2.22UNKNOWN
Gentooanyallapp-emulation/virtualbox-bin< 4.2.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Gentoo	any	all	app-emulation/virtualbox	< 4.2.22	UNKNOWN
Gentoo	any	all	app-emulation/virtualbox-bin	< 4.2.22	UNKNOWN

3.5 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.2%

JSON

Related for GLSA-201401-13