CVE-2017-10235

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10235

CVE-2017-10235 affects Oracle VM VirtualBox Core prior to 5.1.24. An attacker with local access could trigger a buffer overflow in the host’s DevE1000 emulation (e1kFallbackAddToFrame/e1kFallbackAddSegment) via loopback/TSE/GSO scenarios, potentially leading to DoS and, with crafted descriptors, ...

CVE-2017-10241

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10241

CVE-2017-10241 affects Oracle VM VirtualBox (Core) prior to 5.1.24. The vulnerability allows a high-privilege attacker with logon to compromise VirtualBox, potentially causing a hang or frequently repeatable crash (complete DOS), and unauthorized read/write/delete access to some VirtualBox data. ...

CVE-2017-10129

CVE-2017-10129 affects Oracle VM VirtualBox 5.1.x prior to 5.1.24. The issue is in kernel-mode image loading, where Windows caches a mapped image (ImageSectionObject) and desynchronization between on-disk file verification and what is actually mapped can occur (TOCTOU race). A bypass was possible...

CVE-2017-10238

CVE-2017-10238 affects Oracle VM VirtualBox (Core) and is exploitable locally on affected hosts. The vulnerability is present in Oracle VM VirtualBox versions prior to 5.1.24. Reported impacts include a hang or frequent crashes (DOS) and unauthorized read/update/delete of data in VirtualBox-acces...

CVE-2017-10236

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10241

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10129

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10204

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10236

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10239

CVE-2017-10239 affects Oracle VM VirtualBox Core, with vulnerable versions prior to 5.1.24. It is a local , high-privilege issue that can lead to a hang/DoS and unauthorized read/write access to VirtualBox data. CVSSv3 base score 7.3 (HIGH). Remediation: upgrade to at least 5.1.24; Mageia lists V...

CVE-2017-10236

CVE-2017-10236 affects Oracle VM VirtualBox Core prior to 5.1.24. The issue can enable a locally authenticated, high-privilege attacker to cause a hang/DoS and unauthorized read/write access to VirtualBox data, with CVSSv3.0 base score 7.3 (HIGH). Public sources reference Oracle’s patching; Magei...

CVE-2017-10242

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10210

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10204

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10237

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10209

CVE-2017-10209 affects Oracle VM VirtualBox (Core) prior to 5.1.24. A local, low-privilege attacker with logon can read a subset of VirtualBox data and cause partial denial of service. Remediation is to apply fixes in newer VirtualBox releases; Mageia advisory MGASA-2017-0250 notes VirtualBox mai...

CVE-2017-10187

CVE-2017-10187 affects the Oracle VM VirtualBox core component (pre-5.1.24). The issue allows a high-privileges attacker with local access to compromise VirtualBox, potentially corrupting data and causing partial Denial of Service (I/L/A impacts as described). Several connected records corroborat...

CVE-2017-10129

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...