Gentoo FoundationMGASA-2017-0250Updated virtualbox packages fix security vulnerabilities
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
Percentile
38.9%
This update provides the virtualbox 5.1.26 maintenance release, fixing security and other issues: This Critical Patch Update contains 14 new unspcified security fixes for Oracle VM VirtualBox. According to currently known info, none of these vulnerabilities may be remotely exploitable without authentication, i.e., none may be exploited over a network without requiring user credentials. For other fixes in this update see the referenced changelog.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | virtualbox | < 5.1.26-1 | virtualbox-5.1.26-1.mga5 |
| Mageia | 5 | noarch | kmod-vboxadditions | < 5.1.26-1 | kmod-vboxadditions-5.1.26-1.mga5 |
| Mageia | 5 | noarch | kmod-virtualbox | < 5.1.26-1 | kmod-virtualbox-5.1.26-1.mga5 |
| Mageia | 6 | noarch | virtualbox | < 5.1.26-1 | virtualbox-5.1.26-1.mga6 |
| Mageia | 6 | noarch | kmod-vboxadditions | < 5.1.26-1 | kmod-vboxadditions-5.1.26-1.mga6 |
| Mageia | 6 | noarch | kmod-virtualbox | < 5.1.26-1 | kmod-virtualbox-5.1.26-1.mga6 |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
Percentile
38.9%