CVE-2020-14892

CVE-2020-14892 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 6.1.16. A low-privilege user with logon can cause Oracle VM VirtualBox to hang or crash (Denial of Service). Other related advisories confirm multiple vulnerabilities in VirtualBox 6.1.x families and that fixes w...

CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14881

CVE-2020-14881 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 6.1.16. The issue allows a high-privilege attacker with logon to compromise VirtualBox, with potential unauthorized access to sensitive data and impact on related products. Remediation per Gentoo/Mageia advisorie...

CVE-2020-14886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14892

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2020-14885

CVE-2020-14885 – Oracle VM VirtualBox Core vulnerability Affected product: Oracle VM VirtualBox (Virtualization) core component, prior to version 6.1.16. Root cause/description: Vulnerability exists in the Core; multiple sources describe it as enabling an attacker with local access to compromise ...

CVE-2020-14884

The CVE-2020-14884 entry refers to Oracle VM VirtualBox (Core) with impact prior to version 6.1.16. Affected software is Oracle VM VirtualBox, versions =6.1.18). Remediation is to upgrade to a fixed version (6.1.16 or later) or apply vendor-provided patches. If upgrading is not feasible, refer to...

CVE-2020-14881

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14872

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14872

CVE-2020-14872 affects Oracle VM VirtualBox Core with only versions prior to 6.1.16 vulnerable. The CVSSv3.1 base score is 8.2 (HIGH) with an attack vector Local, requiring high privileges, no user interaction, and preserving/affecting confidentiality, integrity, and availability. The vulnerabili...

EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2020-2219)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch...

EulerOS Virtualization 3.0.2.2 : vim (EulerOS-SA-2020-2193)

According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the...

EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-2231)

According to the version of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or...

EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2020-2229)

According to the version of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a deni...

EulerOS Virtualization 3.0.2.2 : file (EulerOS-SA-2020-2213)

According to the version of the file packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer...

EulerOS Virtualization 3.0.2.2 : json-c (EulerOS-SA-2020-2189)

According to the version of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by...

EulerOS Virtualization 3.0.2.2 : gperftools-libs (EulerOS-SA-2020-2190)

According to the version of the gperftools-libs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Google gperftools 2.7 has a memory leak in mallocextension.cc, related to MallocExtension::Register and InitModule. NOTE: th...

EulerOS Virtualization 3.0.2.2 : memcached (EulerOS-SA-2020-2208)

According to the versions of the memcached packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service...