ALT-PU-2021-1120

Высокий

ALT-PU-2021-1120: package virtualbox update to version 6.1.18-alt1

Источник

errata.altlinux.org

Дата публикации

22.01.2021

Дата обновления

22.01.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades virtualbox to version 6.1.18-alt1.

Устраненные уязвимости34

BDU:2021-00300

Средний 6

Дата публикации: 26.01.2021

Уязвимость компонента Core виртуальной машины Oracle VM VirtualBox, позволяющая нарушителю оказать воздействие на целостность данных

CVSS 3.1

Средний 6

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Attack vector: Local
Complexity: Low
Privileges: High
User interaction: None
Scope: Changed
Confidentiality: None
Integrity: High
Availability: None

CVSS 2.0

Средний 4.6

AV:L/AC:L/Au:S/C:N/I:C/A:N

Access vector: Local
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: Complete
Availability: None

Ссылки

BDU:2021-00300 https://bdu.fstec.ru/vul/2021-00300

Ссылки1

ALT-PU-2021-1120 https://errata.altlinux.org/ALT-PU-2021-1120

Связанные уязвимости

ALT-PU-2021-1124

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1124: package `kernel-modules-virtualbox-un-def` update to version 6.1.18-alt1.330249.2

ALT-PU-2021-1123

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1123: package `kernel-modules-virtualbox-addition-std-def` update to version 6.1.18-alt1.328795.1

ALT-PU-2021-1122

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1122: package `kernel-modules-virtualbox-std-def` update to version 6.1.18-alt1.328795.1

ALT-PU-2021-1121

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1121: package `kernel-modules-virtualbox-addition-un-def` update to version 6.1.18-alt1.330249.2

CVE-2021-2073

CVSS3: 4.4

ubuntu

почти 6 лет назад

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).