Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11074
HistoryJul 18, 2017 - 12:00 a.m.

KLA11074 Multiple vulnerabilities in Oracle VM VirtualBox

2017-07-1800:00:00
Kaspersky Lab
threats.kaspersky.com
54

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

37.5%

JSON

Detect date:

07/18/2017

Severity:

Warning

Description:

Multiple serious vulnerabilities have been found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to to cause a denial of service, read and write accesible data and possibly to obtain sensitive information.

Affected products:

Oracle VM VirtualBox 5.1.x earlier than 5.1.24

Solution:

Update to the latest versions
Download Oracle VM VirtualBox

Original advisories:

Oracle Critical Patch Update Advisory

Impacts:

OSI

Related products:

Oracle VirtualBox

CVE-IDS:

CVE-2017-102044.6Warning
CVE-2017-101294.6Warning
CVE-2017-102104.6Warning
CVE-2017-102333.6Warning
CVE-2017-102364.6Warning
CVE-2017-102374.6Warning
CVE-2017-102384.6Warning
CVE-2017-102394.6Warning
CVE-2017-102404.6Warning
CVE-2017-102414.6Warning
CVE-2017-102424.6Warning
CVE-2017-102353.6Warning
CVE-2017-102093.6Warning
CVE-2017-101873.6Warning

Exploitation:

Public exploits exist for this vulnerability.

References

Related

openvas 4
nessus 1
mageia 1
googleprojectzero 1
exploitpack 1
ubuntucve 14
myhack58 1
prion 14
debiancve 14
cve 14
zdt 2
seebug 1
exploitdb 1
oracle 1
openvas
openvas
Oracle Virtualbox Multiple Unspecified Vulnerabilities (Jul 2017) - Windows
2017-07-19 00:00:00
Oracle Virtualbox Multiple Unspecified Vulnerabilities (Jul 2017) - Mac OS X
2017-07-19 00:00:00
Mageia: Security Advisory (MGASA-2017-0250)
2022-01-28 00:00:00
nessus
nessus
Oracle VM VirtualBox 5.1.x < 5.1.24 (July 2017 CPU)
2017-07-19 00:00:00
mageia
mageia
Updated virtualbox packages fix security vulnerabilities
2017-08-08 23:24:42
googleprojectzero
googleprojectzero
Bypassing VirtualBox Process Hardening on Windows
2017-08-23 00:00:00
exploitpack
exploitpack
VirtualBox 6.0.4 r128413 - COM RPC Interface Code Injection Host Privilege Escalation
2019-04-24 00:00:00
ubuntucve
ubuntucve
CVE-2017-10236
2017-08-08 00:00:00
CVE-2017-10235
2017-08-08 00:00:00
CVE-2017-10239
2017-08-08 00:00:00
myhack58
myhack58
VirtualBox VMSVGA a plurality of virtual machine escape vulnerability analysis-vulnerability warning-the black bar safety net
2018-11-14 00:00:00
prion
prion
Buffer overflow
2017-08-08 15:29:00
Buffer overflow
2017-08-08 15:29:00
Buffer overflow
2017-08-08 15:29:00
debiancve
debiancve
CVE-2017-10239
2017-08-08 15:29:00
CVE-2017-10235
2017-08-08 15:29:00
CVE-2017-10236
2017-08-08 15:29:00
cve
cve
CVE-2017-10238
2017-08-08 15:29:00
CVE-2017-10235
2017-08-08 15:29:00
CVE-2017-10240
2017-08-08 15:29:00
zdt
zdt
VirtualBox 5.1.22 - Windows Process DLL Signature Bypass Privilege Escalation Exploit
2017-08-03 00:00:00
VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation Exploit
2017-08-03 00:00:00
seebug
seebug
VirtualBox: Windows Process DLL UNC Path Signature Bypass EoP(CVE-2017-10129)
2017-08-04 00:00:00
exploitdb
exploitdb
VirtualBox 6.0.4 r128413 - COM RPC Interface Code Injection Host Privilege Escalation
2019-04-24 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

37.5%

JSON
Related for KLA11074
openvas4nessus1mageia1googleprojectzero1exploitpack1ubuntucve14myhack581prion14debiancve14cve14zdt2seebug1exploitdb1oracle1