ALT-PU-2016-1979

Критический

ALT-PU-2016-1979: package virtualbox update to version 5.1.6-alt1

Источник

errata.altlinux.org

Дата публикации

16.09.2016

Дата обновления

16.09.2016

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades virtualbox to version 5.1.6-alt1.

Устраненные уязвимости1

CVE-2016-5605

Критический 9.1

Дата публикации: 25.10.2016

CWE-284

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.

CVSS 3.0

Критический 9.1

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

CVSS 2.0

Средний 6.4

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: None

Ссылки

CVE-2016-5605 https://nvd.nist.gov/vuln/detail/CVE-2016-5605

Ссылки1

ALT-PU-2016-1979 https://errata.altlinux.org/ALT-PU-2016-1979

Связанные уязвимости

CVE-2016-5605

CVSS3: 9.1

ubuntu

около 10 лет назад

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.

CVE-2016-5605

CVSS3: 9.1

nvd

около 10 лет назад

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.

CVE-2016-5605

CVSS3: 9.1

debian

около 10 лет назад

Unspecified vulnerability in the Oracle VM VirtualBox component before ...

GHSA-h5vc-c65p-cgj9

CVSS3: 9.1

github

больше 4 лет назад

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.

ALT-PU-2016-1983

CVSS3: 9.1

altlinux

около 10 лет назад

ALT-PU-2016-1983: package `kernel-modules-virtualbox-addition-un-def` update to version 5.1.6-alt1.263940.1