Oracle VirtualBox crServerDispatchGetCombinerOutputParameterivNV Out-Of-Bounds Read Information Disclosure Vulnerability

🗓️ 17 Apr 2019 00:00:00Reported by Jason Matthyser of MWR LabsType

zdi🔗 www.zerodayinitiative.com👁 22 Views

Oracle VirtualBox crServerDispatchGetCombinerOutputParameterivNV Out-Of-Bounds Read Information Disclosure Vulnerability allows local attackers to disclose sensitive information. Attackers must execute low-privileged code on the guest system to exploit. It originates from the lack of user-supplied data validation, leading to a read past the end of an allocated object. This can be leveraged for code execution in the hypervisor context

Reporter	Title	Published	Views	Family All 49
BDU FSTEC	The vulnerability of the Core component in the Virtual Machine VM VirtualBox allows a hacker to gain unauthorized access to protected information.	30 Apr 201900:00	–	bdu_fstec
CVE	CVE-2019-2574	23 Apr 201918:16	–	cve
Cvelist	CVE-2019-2574	23 Apr 201918:16	–	cvelist
Debian CVE	CVE-2019-2574	23 Apr 201918:16	–	debiancve
EUVD	EUVD-2019-12214	7 Oct 202500:30	–	euvd
Kaspersky	KLA11471 Multiple vulnerabilities in Oracle VirtualBox	16 Apr 201900:00	–	kaspersky
Mageia	Virtualbox 6.0.6 fixes security vulnerabilities	4 May 201920:13	–	mageia
NVD	CVE-2019-2574	23 Apr 201919:32	–	nvd
Tenable Nessus	openSUSE Security Update : virtualbox (openSUSE-2019-1814)	12 Aug 201900:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2019-2574	30 Aug 202500:00	–	nessus