Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12047
HistoryJan 19, 2021 - 12:00 a.m.

KLA12047 Multiple vulnerabilties in Oracle VirtualBox

2021-01-1900:00:00
Kaspersky Lab
threats.kaspersky.com
13

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0005 Low

EPSS

Percentile

15.9%

JSON

Detect date:

01/19/2021

Severity:

Warning

Description:

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, obtain sensitive information.

Affected products:

Oracle VirtualBox earlier than 6.1.18

Solution:

Update to the latest version
Download VirtualBox

Original advisories:

Oracle Critical Patch Update Advisory – January 2021

Impacts:

OSI

Related products:

Oracle VirtualBox

CVE-IDS:

CVE-2021-20734.4Warning
CVE-2021-20748.2Critical
CVE-2021-21216.0High
CVE-2021-20866.0High
CVE-2021-21304.4Warning
CVE-2021-21246.0High
CVE-2021-21316.0High
CVE-2021-21254.6Warning
CVE-2021-21116.0High
CVE-2021-21126.0High
CVE-2021-21206.0High
CVE-2021-21297.9Critical
CVE-2021-21196.0High
CVE-2021-21286.5High
CVE-2021-21266.0High
CVE-2021-21274.4Warning
CVE-2021-21233.2Warning

References

Related

openvas 5
nessus 5
archlinux 1
gentoo 2
suse 2
ubuntucve 17
veracode 17
prion 17
cve 17
debiancve 17
githubexploit 1
oracle 1
openvas
openvas
Oracle VirtualBox Security Updates (cpujan2021) - Windows
2021-01-22 00:00:00
Oracle VirtualBox Security Updates (cpujan2021) - Linux
2021-01-21 00:00:00
Oracle VirtualBox Security Updates (cpujan2021) - Mac OS X
2021-01-21 00:00:00
nessus
nessus
Oracle VM VirtualBox (Jan 2021 CPU)
2021-01-20 00:00:00
GLSA-202101-15 : VirtualBox: Multiple vulnerabilities
2021-01-25 00:00:00
openSUSE Security Update : virtualbox (openSUSE-2021-165)
2021-01-26 00:00:00
archlinux
archlinux
[ASA-202101-37] virtualbox: multiple issues
2021-01-20 00:00:00
gentoo
gentoo
VirtualBox: Multiple vulnerabilities
2021-01-22 00:00:00
Chromium, Google Chrome: Multiple vulnerabilities
2021-04-30 00:00:00
suse
suse
Security update for virtualbox (important)
2021-01-25 00:00:00
Security update for virtualbox (important)
2021-05-01 00:00:00
ubuntucve
ubuntucve
CVE-2021-2130
2021-01-20 00:00:00
CVE-2021-2128
2021-01-20 00:00:00
CVE-2021-2129
2021-01-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-01-20 23:38:57
Authorization Bypass
2021-01-20 23:23:01
Denial Of Service (DoS)
2021-01-20 23:39:00
prion
prion
Buffer overflow
2021-01-20 15:15:00
Buffer overflow
2021-01-20 15:15:00
Buffer overflow
2021-01-20 15:15:00
cve
cve
CVE-2021-2129
2021-01-20 15:15:00
CVE-2021-2128
2021-01-20 15:15:00
CVE-2021-2074
2021-01-20 15:15:00
debiancve
debiancve
CVE-2021-2129
2021-01-20 15:15:00
CVE-2021-2128
2021-01-20 15:15:00
CVE-2021-2131
2021-01-20 15:15:00
githubexploit
githubexploit
Exploit for Vulnerability in Oracle Vm Virtualbox
2021-01-15 17:32:24
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0005 Low

EPSS

Percentile

15.9%

JSON
Related for KLA12047
openvas5nessus5archlinux1gentoo2suse2ubuntucve17veracode17prion17cve17debiancve17githubexploit1oracle1