CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14881

CVE-2020-14881 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 6.1.16. The issue allows a high-privilege attacker with logon to compromise VirtualBox, with potential unauthorized access to sensitive data and impact on related products. Remediation per Gentoo/Mageia advisorie...

CVE-2020-14886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14892

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2020-14885

CVE-2020-14885 – Oracle VM VirtualBox Core vulnerability Affected product: Oracle VM VirtualBox (Virtualization) core component, prior to version 6.1.16. Root cause/description: Vulnerability exists in the Core; multiple sources describe it as enabling an attacker with local access to compromise ...

CVE-2020-14884

The CVE-2020-14884 entry refers to Oracle VM VirtualBox (Core) with impact prior to version 6.1.16. Affected software is Oracle VM VirtualBox, versions =6.1.18). Remediation is to upgrade to a fixed version (6.1.16 or later) or apply vendor-provided patches. If upgrading is not feasible, refer to...

CVE-2020-14881

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14872

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14872

CVE-2020-14872 affects Oracle VM VirtualBox Core with only versions prior to 6.1.16 vulnerable. The CVSSv3.1 base score is 8.2 (HIGH) with an attack vector Local, requiring high privileges, no user interaction, and preserving/affecting confidentiality, integrity, and availability. The vulnerabili...

EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2020-2229)

According to the version of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a deni...

EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2020-2219)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch...

EulerOS Virtualization 3.0.2.2 : e2fsprogs (EulerOS-SA-2020-2214)

According to the version of the e2fsprogs packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ex...

EulerOS Virtualization 3.0.2.2 : gperftools-libs (EulerOS-SA-2020-2190)

According to the version of the gperftools-libs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Google gperftools 2.7 has a memory leak in mallocextension.cc, related to MallocExtension::Register and InitModule. NOTE: th...

EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-2231)

According to the version of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or...

EulerOS Virtualization 3.0.2.2 : iptables (EulerOS-SA-2020-2185)

According to the version of the iptables packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially...

EulerOS Virtualization 3.0.2.2 : openldap (EulerOS-SA-2020-2230)

According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of servic...

EulerOS Virtualization 3.0.2.2 : patch (EulerOS-SA-2020-2220)

According to the version of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and...

EulerOS Virtualization 3.0.2.2 : ntp (EulerOS-SA-2020-2225)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic...

EulerOS Virtualization 3.0.2.2 : dnsmasq (EulerOS-SA-2020-2215)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of...