ALT-PU-2014-2068

Низкий

ALT-PU-2014-2068: package kernel-modules-virtualbox-std-def update to version 4.3.14-alt1.200209.1

Источник

errata.altlinux.org

Дата публикации

03.09.2014

Дата обновления

03.09.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kernel-modules-virtualbox-std-def to version 4.3.14-alt1.200209.1.

Устраненные уязвимости9

CVE-2014-0981

Средний 4.4

Дата публикации: 31.03.2014

CWE-399

VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.

CVSS 2.0

Средний 4.4

AV:L/AC:M/Au:N/C:P/I:P/A:P

Access vector: Local
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2014-0981 https://nvd.nist.gov/vuln/detail/CVE-2014-0981

Ссылки1

ALT-PU-2014-2068 https://errata.altlinux.org/ALT-PU-2014-2068

Связанные уязвимости

ALT-PU-2014-3194

altlinux

около 12 лет назад

ALT-PU-2014-3194: package `kernel-modules-virtualbox-addition-un-def` update to version 4.3.14-alt1.200705.1

ALT-PU-2014-2070

altlinux

около 12 лет назад

ALT-PU-2014-2070: package `kernel-modules-virtualbox-un-def` update to version 4.3.14-alt1.200705.1

ALT-PU-2014-2069

altlinux

около 12 лет назад

ALT-PU-2014-2069: package `kernel-modules-virtualbox-addition-std-def` update to version 4.3.14-alt1.200209.1

ALT-PU-2014-2067

altlinux

около 12 лет назад

ALT-PU-2014-2067: package `virtualbox` update to version 4.3.14-alt1

ALT-PU-2014-3226

altlinux

больше 12 лет назад

ALT-PU-2014-3226: package `kernel-src-vboxguest` update to version 4.3.8-alt1