CVE-2017-3563

CVE-2017-3563 affects Oracle VM VirtualBox Core in 5.0.x and 5.1.x before 5.0.38/5.1.20. The root cause is a chain-of-trust DLL loading weakness in VirtualBox process hardening, which can be exploited by abusing COM hijacks to load Microsoft-signed DLLs (via hijacked VirtualBoxClient COM object) ...

CVE-2017-3576

Summary : CVE-2017-3576 affects the Oracle VM VirtualBox core subcomponent. Affected software: Oracle VM VirtualBox core (Virtualization platform) with vulnerable ranges prior to 5.0.38 and prior to 5.1.20. Root cause/impact : Easily exploitable vulnerability that allows a low-privileged user wit...

CVE-2017-3587

CVE-2017-3587 refers to a vulnerability in the Shared Folder subcomponent of Oracle VM VirtualBox. Affected product versions are VirtualBox prior to 5.0.38 and prior to 5.1.20. An attacker with low privileges and local logon can exploit this to gain unauthorized creation, deletion or modification...

CVE-2017-3558

CVE-2017-3558 affects Oracle VM VirtualBox (Core) with builds prior to 5.0.38 and 5.1.20. The issue stems from a heap allocator (slirp) and header handling in VirtualBox’ networking code, where an attacker can corrupt a heap header via crafted IP/UDP/TCP input. Due to dropped asserts in release b...

CVE-2017-3575

CVE-2017-3575 affects Oracle VM VirtualBox core subcomponent; affected versions are prior to 5.0.38 and prior to 5.1.20. The issue is described as easily exploitable by a high-privilege attacker with logon to the infrastructure running VirtualBox, potentially leading to unauthorized data creation...

CVE-2017-3558

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3559

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3576

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3587

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2017-3513

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3563

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3538

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2017-3513

CVE-2017-3513 affects Oracle VM VirtualBox core; affected are prior to 5.0.38 and prior to 5.1.20. The issue allows a high-privilege attacker with logon to read a subset of VirtualBox data (local access). Several connected advisories confirm fixed updates: openSUSE/OpenSUSE-533/534 reference Virt...

CVE-2017-3576

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-2326

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

Information disclosure

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

KLA11027 Multiple vulnerabilities in Oracle VM VirtualBox

Multiple serious vulnerabilities have been found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to cause a denial of service, read and write accesible data and possibly to obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple unspecifie...

PT-2017-1985

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue is related to insufficient access control in the Shared Folder component of Oracle VM VirtualBox, allowing a low-privileged...

PT-2017-1986

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20 Description The issue is related to insufficient access control in the Oracle VM VirtualBox component, allowing a low-privileged attacker with logon...