ALT-PU-2019-1247

Низкий

ALT-PU-2019-1247: package kernel-modules-virtualbox-addition-un-def update to version 5.2.26-alt1.267028.1

Источник

errata.altlinux.org

Дата публикации

15.02.2019

Дата обновления

15.02.2019

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kernel-modules-virtualbox-addition-un-def to version 5.2.26-alt1.267028.1.

Устраненные уязвимости2

BDU:2019-00454

Средний 6.5

Дата публикации: 05.02.2019

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю вызвать зависание или аварийное завершение работы приложения

CVSS 3.1

Средний 6.5

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Changed
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 4.6

AV:L/AC:L/Au:S/C:N/I:N/A:C

Access vector: Local
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2019-00454 https://bdu.fstec.ru/vul/2019-00454

Ссылки1

ALT-PU-2019-1247 https://errata.altlinux.org/ALT-PU-2019-1247

Связанные уязвимости

CVE-2019-2527

CVSS3: 6.5

ubuntu

почти 8 лет назад

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.26 and prior to 6.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).