CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14881

CVE-2020-14881 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 6.1.16. The issue allows a high-privilege attacker with logon to compromise VirtualBox, with potential unauthorized access to sensitive data and impact on related products. Remediation per Gentoo/Mageia advisorie...

CVE-2020-14886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14892

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2020-14885

CVE-2020-14885 – Oracle VM VirtualBox Core vulnerability Affected product: Oracle VM VirtualBox (Virtualization) core component, prior to version 6.1.16. Root cause/description: Vulnerability exists in the Core; multiple sources describe it as enabling an attacker with local access to compromise ...

CVE-2020-14881

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14884

The CVE-2020-14884 entry refers to Oracle VM VirtualBox (Core) with impact prior to version 6.1.16. Affected software is Oracle VM VirtualBox, versions =6.1.18). Remediation is to upgrade to a fixed version (6.1.16 or later) or apply vendor-provided patches. If upgrading is not feasible, refer to...

CVE-2020-14884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-14872

CVE-2020-14872 affects Oracle VM VirtualBox Core with only versions prior to 6.1.16 vulnerable. The CVSSv3.1 base score is 8.2 (HIGH) with an attack vector Local, requiring high privileges, no user interaction, and preserving/affecting confidentiality, integrity, and availability. The vulnerabili...

CVE-2020-14872

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Huawei EulerOS: Security Advisory for libarchive (EulerOS-SA-2020-2231)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : gperftools-libs (EulerOS-SA-2020-2190)

According to the version of the gperftools-libs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Google gperftools 2.7 has a memory leak in mallocextension.cc, related to MallocExtension::Register and InitModule. NOTE: th...

EulerOS Virtualization 3.0.2.2 : vim (EulerOS-SA-2020-2193)

According to the version of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the...

EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2020-2219)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch...

EulerOS Virtualization 3.0.2.2 : file (EulerOS-SA-2020-2213)

According to the version of the file packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer...

EulerOS Virtualization 3.0.2.2 : json-c (EulerOS-SA-2020-2189)

According to the version of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by...

EulerOS Virtualization 3.0.2.2 : iptables (EulerOS-SA-2020-2185)

According to the version of the iptables packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to at least crash the program or potentially...

EulerOS Virtualization 3.0.2.2 : ntp (EulerOS-SA-2020-2225)

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic...

EulerOS Virtualization 3.0.2.2 : sudo (EulerOS-SA-2020-2196)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged...