KLA10888 Multiple vulnerabilities in Oracle VM VirtualBox

Multiple serious vulnerabilities have been found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, affect integrity or obtain sensitive information. These vulnerabilities can be executed remotely and related to Core, OpenSSL and VRDE.

Original advisories

Oracle bulletin

Related products

Oracle-VirtualBox

CVE list

CVE-2016-5605 high

CVE-2016-5501 high

CVE-2016-5610 warning

CVE-2016-5538 high

CVE-2016-5608 warning

CVE-2016-5611 warning

CVE-2016-5613 warning

CVE-2016-6304 critical

Solution

Update to the latest version

Oracle VM VirtualBox download page

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• LoI

Loss of integrity. Exploitation of vulnerabilities with this impact can lead to partial system fault or system components connection disruption.

Affected Products

• Oracle VM VirtualBox versions earlier than 5.0.28Oracle VM VirtualBox 5.1 versions earlier than 5.1.8