CVE-2017-3513

CVE-2017-3513 affects Oracle VM VirtualBox core; affected are prior to 5.0.38 and prior to 5.1.20. The issue allows a high-privilege attacker with logon to read a subset of VirtualBox data (local access). Several connected advisories confirm fixed updates: openSUSE/OpenSUSE-533/534 reference Virt...

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3575

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3587

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2017-3587

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2017-3538: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2017-3587: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

PT-2017-15992

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2017-15997

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2017-15995

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2017-1985

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue is related to insufficient access control in the Shared Folder component of Oracle VM VirtualBox, allowing a low-privileged...

PT-2017-1987

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue is related to insufficient access control in the Oracle VM VirtualBox component, specifically in the Core subcomponent. It allows...

KLA11027 Multiple vulnerabilities in Oracle VM VirtualBox

Multiple serious vulnerabilities have been found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to cause a denial of service, read and write accesible data and possibly to obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple unspecifie...

CVE-2017-3576: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3563: Improper Certificate Validation

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3559: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

PT-2017-1986

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue is related to insufficient access control in the Oracle VM VirtualBox component, allowing a low-privileged attacker with logon...

PT-2017-15949

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2017-15993

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

CVE-2017-3561: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...