Lucene search

K
redosRedosROS-20240829-01
HistoryAug 29, 2024 - 12:00 a.m.

ROS-20240829-01

2024-08-2900:00:00
redos.red-soft.ru
4
oracle vm virtualbox
core component
resource release errors
denial of service
insufficient input validation
compromise
lack of service data protection
unix

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.3

Confidence

Low

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to resource release errors.
resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to
Insufficient input validation. Exploitation of the vulnerability could allow an attacker to
compromise Oracle VM VirtualBox

Vulnerability of Core component of Oracle VM VirtualBox virtualization software tool is associated with
Lack of service data protection. Exploitation of the vulnerability could allow an attacker to
compromise Oracle VM VirtualBox

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64virtualbox< 7.0.20-1UNKNOWN

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.3

Confidence

Low