CVE-2017-10240

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10240

The CVE-2017-10240 vulnerability affects Oracle VM VirtualBox (Core) and is listed as fixed in Oracle’s virtualization stack before 5.1.26 (per Mageia advisory MGASA-2017-0250). Affects VirtualBox core, with code paths in VT-x/VM handling that could be reached by an attacker who has logged on to ...

CVE-2017-10235

CVE-2017-10235 affects Oracle VM VirtualBox Core prior to 5.1.24. An attacker with local access could trigger a buffer overflow in the host’s DevE1000 emulation (e1kFallbackAddToFrame/e1kFallbackAddSegment) via loopback/TSE/GSO scenarios, potentially leading to DoS and, with crafted descriptors, ...

CVE-2017-10236

CVE-2017-10236 affects Oracle VM VirtualBox Core prior to 5.1.24. The issue can enable a locally authenticated, high-privilege attacker to cause a hang/DoS and unauthorized read/write access to VirtualBox data, with CVSSv3.0 base score 7.3 (HIGH). Public sources reference Oracle’s patching; Magei...

CVE-2017-10236

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10237

CVE-2017-10237 is a vulnerability in the Oracle VM VirtualBox Core component, affecting versions prior to 5.1.24. The incident is a local-privilege escalation that could allow a high-privilege attacker with logon access to cause a hang or crash (DOs) and potentially unauthorized updates, inserts,...

CVE-2017-10187

CVE-2017-10187 affects the Oracle VM VirtualBox core component (pre-5.1.24). The issue allows a high-privileges attacker with local access to compromise VirtualBox, potentially corrupting data and causing partial Denial of Service (I/L/A impacts as described). Several connected records corroborat...

CVE-2017-10209

CVE-2017-10209 affects Oracle VM VirtualBox (Core) prior to 5.1.24. A local, low-privilege attacker with logon can read a subset of VirtualBox data and cause partial denial of service. Remediation is to apply fixes in newer VirtualBox releases; Mageia advisory MGASA-2017-0250 notes VirtualBox mai...

CVE-2017-10204

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10238

CVE-2017-10238 affects Oracle VM VirtualBox (Core) and is exploitable locally on affected hosts. The vulnerability is present in Oracle VM VirtualBox versions prior to 5.1.24. Reported impacts include a hang or frequent crashes (DOS) and unauthorized read/update/delete of data in VirtualBox-acces...

CVE-2017-10239

CVE-2017-10239 affects Oracle VM VirtualBox Core, with vulnerable versions prior to 5.1.24. It is a local , high-privilege issue that can lead to a hang/DoS and unauthorized read/write access to VirtualBox data. CVSSv3 base score 7.3 (HIGH). Remediation: upgrade to at least 5.1.24; Mageia lists V...

CVE-2017-10242

Oracle VM VirtualBox is affected in core component versions before 5.1.24. A local, high-privilege attacker with logon to the infrastructure where VirtualBox runs can cause a hang or frequent crash (DOS) and may modify or read some VirtualBox data. Remediation guidance in the linked sources indic...

CVE-2017-10129

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10237

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10238

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10239

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10241

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10210

CVE-2017-10210 affects Oracle VM VirtualBox (Core) via the VMSVGA path. A concrete root cause described in connected material is an integer overflow in SVGA3D_CMD surface handling (vmsvga3dSurfaceDefine) that can cause memory corruption and a subsequent crash or crash-driven state. The adverse ef...

CVE-2017-10129

CVE-2017-10129 affects Oracle VM VirtualBox 5.1.x prior to 5.1.24. The issue is in kernel-mode image loading, where Windows caches a mapped image (ImageSectionObject) and desynchronization between on-disk file verification and what is actually mapped can occur (TOCTOU race). A bypass was possible...

CVE-2017-10241

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...