Lucene search

K
kasperskyKaspersky LabKLA10744
HistoryFeb 21, 2016 - 12:00 a.m.

KLA10744 Multiple vulnerabilities in Oracle VM VirtualBox

2016-02-2100:00:00
Kaspersky Lab
threats.kaspersky.com
54

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.057 Low

EPSS

Percentile

93.2%

Detect date:

02/21/2016

Severity:

Critical

Description:

An unspecified vulnerabilities were found in Oracle VirtualBox. By exploiting these vulnerabilities malicious users can affect availability, integrity and confidentiality. These vulnerabilities can be exploited remotely via an unknown vectors related to Core and Windows Installer.

Affected products:

Oracle VM VirtualBox versions earlier than 5.0.14

Solution:

Update to the latest version
Get VirtualBox

Original advisories:

Oracle bulletin

Impacts:

ACE

Related products:

Oracle VirtualBox

CVE-IDS:

CVE-2015-53074.9Warning
CVE-2015-81044.7Warning
CVE-2015-71837.5Critical
CVE-2016-06026.2High
CVE-2016-04954.3Warning
CVE-2016-05922.1Warning

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.057 Low

EPSS

Percentile

93.2%