ALT-PU-2014-3226

Низкий

ALT-PU-2014-3226: package kernel-src-vboxguest update to version 4.3.8-alt1

Источник

errata.altlinux.org

Дата публикации

28.02.2014

Дата обновления

28.02.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kernel-src-vboxguest to version 4.3.8-alt1.

Устраненные уязвимости2

CVE-2014-0981

Средний 4.4

Дата публикации: 31.03.2014

CWE-399

VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.

CVSS 2.0

Средний 4.4

AV:L/AC:M/Au:N/C:P/I:P/A:P

Access vector: Local
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2014-0981 https://nvd.nist.gov/vuln/detail/CVE-2014-0981

Ссылки1

ALT-PU-2014-3226 https://errata.altlinux.org/ALT-PU-2014-3226

Связанные уязвимости

ALT-PU-2014-3211

altlinux

больше 12 лет назад

ALT-PU-2014-3211: package `kernel-src-vboxhost` update to version 4.3.8-alt1

ALT-PU-2014-3194

altlinux

около 12 лет назад

ALT-PU-2014-3194: package `kernel-modules-virtualbox-addition-un-def` update to version 4.3.14-alt1.200705.1

ALT-PU-2014-2070

altlinux

около 12 лет назад

ALT-PU-2014-2070: package `kernel-modules-virtualbox-un-def` update to version 4.3.14-alt1.200705.1

ALT-PU-2014-2069

altlinux

около 12 лет назад

ALT-PU-2014-2069: package `kernel-modules-virtualbox-addition-std-def` update to version 4.3.14-alt1.200209.1

ALT-PU-2014-2068

altlinux

около 12 лет назад

ALT-PU-2014-2068: package `kernel-modules-virtualbox-std-def` update to version 4.3.14-alt1.200209.1