Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11641
HistoryJan 05, 2020 - 12:00 a.m.

KLA11641 Multiple vulnerabilities in Oracle VirtualBox

2020-01-0500:00:00
Kaspersky Lab
threats.kaspersky.com
19

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.871 High

EPSS

Percentile

98.6%

JSON

Detect date:

01/05/2020

Severity:

Warning

Description:

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Oracle VirtualBox 5.2.x up to 5.2.36
Oracle VirtualBox 6.0.x up to 6.0.16
Oracle VirtualBox 6.1.x up to 6.1.2

Solution:

Update to the latest version
Download Oracle Virtual Box

Original advisories:

Oracle Critical Patch Update Advisory – January 2020

Impacts:

OSI

Related products:

Oracle VirtualBox

CVE-IDS:

CVE-2019-15471.9Warning
CVE-2020-26744.6Warning
CVE-2020-26824.6Warning
CVE-2019-02275.4High
CVE-2020-26984.4Warning
CVE-2020-27014.4Warning
CVE-2020-27024.4Warning
CVE-2020-27264.4Warning
CVE-2020-26812.1Warning
CVE-2020-26892.1Warning
CVE-2020-26902.1Warning
CVE-2020-26912.1Warning
CVE-2020-26922.1Warning
CVE-2020-27032.1Warning
CVE-2020-27042.1Warning
CVE-2020-27052.1Warning
CVE-2020-27252.1Warning
CVE-2020-26783.3Warning
CVE-2019-170914.3Warning
CVE-2020-27272.1Warning
CVE-2020-26931.9Warning
CVE-2019-100924.3Warning

References

Related

mageia 1
openvas 20
nessus 26
gentoo 3
prion 22
osv 7
debiancve 22
symantec 3
cve 22
github 2
zdi 15
ubuntucve 21
httpd 1
debian 5
redhatcve 3
alpinelinux 2
zdt 2
githubexploit 2
f5 2
nuclei 1
rhino 1
packetstorm 1
exploitpack 1
checkpoint_advisories 1
openssl 1
ibm 8
veracode 1
suse 2
aix 1
mageia
mageia
Updated virtualbox packages fix security vulnerabilities
2020-01-28 14:32:54
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0065)
2022-01-28 00:00:00
Oracle VirtualBox Security Update (cpujan2020 - 01) - Windows
2020-01-16 00:00:00
Oracle VirtualBox Security Update (cpujan2020 - 01) - Mac OS X
2020-01-16 00:00:00
nessus
nessus
Oracle VM VirtualBox 5.2.x < 5.2.36 / 6.0.x < 6.0.16 / 6.1.x < 6.1.2 (Jan 2020 CPU)
2020-01-16 00:00:00
GLSA-202004-02 : VirtualBox: Multiple vulnerabilities
2020-04-02 00:00:00
Oracle Secure Global Desktop Multiple Vulnerabilities (January 2020 CPU)
2020-01-17 00:00:00
gentoo
gentoo
VirtualBox: Multiple vulnerabilities
2020-04-01 00:00:00
VirtualBox: Multiple vulnerabilities
2021-01-12 00:00:00
OpenSSL: Multiple vulnerabilities
2019-11-07 00:00:00
prion
prion
Cross site scripting
2019-10-02 14:15:00
Buffer overflow
2020-01-15 17:15:00
Buffer overflow
2020-01-15 17:15:00
osv
osv
CVE-2019-17091
2019-10-02 14:15:00
Cross-site Scripting in Eclipse Mojarra
2022-05-24 16:57:42
apache2 - security update
2019-10-15 00:00:00
debiancve
debiancve
CVE-2019-17091
2019-10-02 14:15:00
CVE-2020-2701
2020-01-15 17:15:00
CVE-2020-2674
2020-01-15 17:15:00
symantec
symantec
Eclipse Mojarra CVE-2019-17091 Cross Site Scripting Vulnerability
2019-10-02 00:00:00
Apache Axis CVE-2019-0227 Remote Code Execution Vulnerability
2019-04-09 00:00:00
OpenSSL CVE-2019-1547 Information Disclosure Vulnerability
2019-09-10 00:00:00
cve
cve
CVE-2019-17091
2019-10-02 14:15:00
CVE-2020-2674
2020-01-15 17:15:00
CVE-2020-2682
2020-01-15 17:15:00
github
github
Cross-site Scripting in Eclipse Mojarra
2022-05-24 16:57:42
Server Side Request Forgery in Apache Axis
2019-05-14 04:02:24
zdi
zdi
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability
2020-01-15 00:00:00
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability
2020-01-15 00:00:00
Oracle VirtualBox VBoxVHWAHandleTable Out-Of-Bounds Access Privilege Escalation Vulnerability
2020-01-15 00:00:00
ubuntucve
ubuntucve
CVE-2020-2701
2020-01-15 00:00:00
CVE-2020-2682
2020-01-15 00:00:00
CVE-2020-2704
2020-01-15 00:00:00
httpd
httpd
Apache Httpd < 2.4.41 : Limited cross-site scripting in mod_proxy error page
2019-07-09 00:00:00
debian
debian
[SECURITY] [DSA 4509-3] apache2 security update
2019-10-15 21:12:52
[SECURITY] [DSA 4509-3] apache2 security update
2019-10-15 21:12:52
[SECURITY] [DLA 1900-2] apache2 regression update
2019-09-30 20:41:09
redhatcve
redhatcve
CVE-2019-10092
2020-04-07 04:56:12
CVE-2019-0227
2019-04-11 08:59:43
CVE-2019-1547
2019-11-03 09:38:16
alpinelinux
alpinelinux
CVE-2019-10092
2019-09-26 16:15:00
CVE-2019-1547
2019-09-10 17:15:00
zdt
zdt
Apache Httpd mod_proxy - Error Page Cross-Site Scripting Vulnerability
2019-11-19 00:00:00
Apache Axis 1.4 - Remote Code Execution Exploit
2019-04-09 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Apache Http Server
2019-12-18 14:15:13
Exploit for Server-Side Request Forgery in Apache Axis
2019-10-27 14:42:54
f5
f5
K30442259 : Apache HTTPD vulnerability CVE-2019-10092
2019-09-09 00:00:00
K73422160 : OpenSSL vulnerability CVE-2019-1547
2019-10-10 00:00:00
nuclei
nuclei
Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting
2021-01-09 14:45:11
rhino
rhino
CVE-2019-0227: Expired Domain to Remote Code Execution in Apache Axis
2019-04-09 10:30:52
packetstorm
packetstorm
Apache Axis 1.4 Remote Code Execution
2019-04-10 00:00:00
exploitpack
exploitpack
Apache Axis 1.4 - Remote Code Execution
2019-04-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Axis Remote Code Execution (CVE-2019-0227)
2019-04-22 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2019-1547
2019-09-10 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in OpenSSL affects IBM Storage Protect Backup-Archive Client on Linux x86_64 and Microsoft Windows (CVE-2019-1547)
2023-10-31 14:40:39
Security Bulletin: IBM Security SiteProtector System is affected by Apache HTTP Server vulnerabilities
2020-02-27 10:36:45
Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2019-10092, CVE-2019-10098)
2019-10-08 19:24:20
veracode
veracode
Side-Channel Attack
2019-09-11 07:19:08
suse
suse
Security update for openssl-1_1 (moderate)
2019-09-25 00:00:00
Security update for openssl-1_1 (moderate)
2019-09-24 00:00:00
aix
aix
There is a vulnerability in OpenSSL used by AIX.
2019-11-26 14:32:29

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.871 High

EPSS

Percentile

98.6%

JSON
Related for KLA11641
mageia1openvas20nessus26gentoo3prion22osv7debiancve22symantec3cve22github2zdi15ubuntucve21httpd1debian5redhatcve3alpinelinux2zdt2githubexploit2f52nuclei1rhino1packetstorm1exploitpack1checkpoint_advisories1openssl1ibm8veracode1suse2aix1