Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11405
HistoryJan 15, 2019 - 12:00 a.m.

KLA11405 Multiple vulnerabilities in Oracle Virtual Box

2019-01-1500:00:00
Kaspersky Lab
threats.kaspersky.com
11

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.106 Low

EPSS

Percentile

94.9%

JSON

Detect date:

01/15/2019

Severity:

Critical

Description:

Multiple vulnerabilities were found in Oracle Virtual Box. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions and cause denial of service.

Affected products:

Oracle VM Virtual Box versions earlier than 5.2.24
Oracle VM Virtual Box versions earlier than 6.0.2

Solution:

Update to the latest version
Download Oracle Virtual Box

Original advisories:

Oracle Critical Patch Update Advisory – January 2019

Impacts:

OSI

Related products:

Oracle VirtualBox

CVE-IDS:

CVE-2019-25004.6Warning
CVE-2019-25244.6Warning
CVE-2019-25524.6Warning
CVE-2018-33094.6Warning
CVE-2019-25204.4Warning
CVE-2019-25214.4Warning
CVE-2019-25224.4Warning
CVE-2019-25234.4Warning
CVE-2019-25264.4Warning
CVE-2019-25484.6Warning
CVE-2019-25117.8Critical
CVE-2019-25084.9Warning
CVE-2019-25094.9Warning
CVE-2019-25272.1Warning
CVE-2019-24502.1Warning
CVE-2019-24512.1Warning
CVE-2019-25552.1Warning
CVE-2019-25542.1Warning
CVE-2019-25562.1Warning
CVE-2018-07344.3Warning
CVE-2019-25251.9Warning
CVE-2019-24462.1Warning
CVE-2019-24482.1Warning
CVE-2019-25012.1Warning
CVE-2019-25042.1Warning
CVE-2019-25052.1Warning
CVE-2019-25062.1Warning
CVE-2019-25532.1Warning

References

Related

openvas 18
mageia 1
nessus 15
suse 4
githubexploit 2
prion 28
cve 28
debiancve 28
ubuntucve 28
zdi 20
ibm 16
redhatcve 1
veracode 1
amazon 2
cbl_mariner 1
osv 1
openssl 1
symantec 1
alpinelinux 1
f5 1
photon 1
openvas
openvas
Oracle VirtualBox Security Updates (jan2019-5072801) 04 - Windows
2019-01-16 00:00:00
Oracle VirtualBox Security Updates (jan2019-5072801) 05 - Linux
2019-01-16 00:00:00
Oracle VirtualBox Security Updates (jan2019-5072801) 06 - MAC OS X
2019-01-16 00:00:00
mageia
mageia
Updated virtualbox packages fix security vulnerabilities
2019-01-30 22:39:18
nessus
nessus
openSUSE Security Update : virtualbox (openSUSE-2019-1547)
2019-06-12 00:00:00
openSUSE Security Update : virtualbox (openSUSE-2019-84)
2019-01-28 00:00:00
Oracle VM VirtualBox 5.2.x < 5.2.24 / 6.0.x < 6.0.2 (Jan 2019 CPU)
2019-01-18 00:00:00
suse
suse
Security update for virtualbox (important)
2019-01-25 00:00:00
Security update for virtualbox (important)
2019-06-11 00:00:00
Security update for virtualbox (important)
2019-07-30 00:00:00
githubexploit
githubexploit
Exploit for Vulnerability in Oracle Vm Virtualbox
2019-08-03 12:25:41
Exploit for Vulnerability in Oracle Vm Virtualbox
2019-08-01 08:25:53
prion
prion
Buffer overflow
2019-01-16 19:30:00
Buffer overflow
2019-01-16 19:30:00
Buffer overflow
2019-01-16 19:30:00
cve
cve
CVE-2019-2552
2019-01-16 19:30:00
CVE-2019-2556
2019-01-16 19:30:00
CVE-2019-2508
2019-01-16 19:30:00
debiancve
debiancve
CVE-2019-2552
2019-01-16 19:30:00
CVE-2019-2504
2019-01-16 19:30:00
CVE-2019-2506
2019-01-16 19:30:00
ubuntucve
ubuntucve
CVE-2019-2552
2019-01-16 00:00:00
CVE-2019-2556
2019-01-16 00:00:00
CVE-2019-2554
2019-01-16 00:00:00
zdi
zdi
Oracle VirtualBox crServerDispatchGetTexEnvfv Uninitialized Memory Information Disclosure Vulnerability
2019-01-16 00:00:00
Oracle VirtualBox crServerDispatchGetMapfv Uninitialized Memory Information Disclosure Vulnerability
2019-01-17 00:00:00
Oracle VirtualBox crServerDispatchGetTexEnviv Uninitialized Memory Information Disclosure Vulnerability
2019-01-16 00:00:00
ibm
ibm
Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2018-0734)
2019-03-27 06:25:01
Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System
2020-11-10 10:24:49
Security Bulletin: OpenSSL vunerability
2019-01-21 15:55:02
redhatcve
redhatcve
CVE-2018-0734
2018-10-30 16:49:12
veracode
veracode
Side-Channel Attack
2018-10-30 03:53:03
amazon
amazon
Low: openssl
2019-01-23 23:29:00
Low: openssl
2019-03-21 18:40:00
cbl_mariner
cbl_mariner
CVE-2018-0734 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
osv
osv
CVE-2018-0734
2018-10-30 12:29:00
openssl
openssl
Vulnerability in OpenSSL CVE-2018-0734
2018-10-30 00:00:00
symantec
symantec
OpenSSL CVE-2018-0734 Side Channel Attack Information Disclosure Vulnerability
2018-10-30 00:00:00
alpinelinux
alpinelinux
CVE-2018-0734
2018-10-30 12:29:00
f5
f5
K43741620 : OpenSSL vulnerabilities CVE-2018-0734 and CVE-2018-0735
2018-12-15 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0210
2020-02-21 00:00:00

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.106 Low

EPSS

Percentile

94.9%

JSON
Related for KLA11405
openvas18mageia1nessus15suse4githubexploit2prion28cve28debiancve28ubuntucve28zdi20ibm16redhatcve1veracode1amazon2cbl_mariner1osv1openssl1symantec1alpinelinux1f51photon1