ALT-PU-2021-4915

Высокий

ALT-PU-2021-4915: package kernel-modules-virtualbox-addition-un-def update to version 6.1.16-alt1.330243.1

Источник

errata.altlinux.org

Дата публикации

04.01.2021

Дата обновления

04.01.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kernel-modules-virtualbox-addition-un-def to version 6.1.16-alt1.330243.1.

Устраненные уязвимости14

BDU:2020-05254

Средний 5.5

Дата публикации: 19.11.2020

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Средний 5.5

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 4.9

AV:L/AC:L/Au:N/C:N/I:N/A:C

Access vector: Local
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2020-05254 https://bdu.fstec.ru/vul/2020-05254

Ссылки1

ALT-PU-2021-4915 https://errata.altlinux.org/ALT-PU-2021-4915

Связанные уязвимости

ALT-PU-2021-4976

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-4976: package `kernel-modules-virtualbox-un-def` update to version 6.1.16-alt1.330243.1

ALT-PU-2021-1004

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1004: package `kernel-modules-virtualbox-addition-std-def` update to version 6.1.16-alt1.328789.2

ALT-PU-2021-1003

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1003: package `kernel-modules-virtualbox-std-def` update to version 6.1.16-alt1.328789.2

ALT-PU-2021-1002

CVSS3: 8.2

altlinux

почти 6 лет назад

ALT-PU-2021-1002: package `virtualbox` update to version 6.1.16-alt1

CVE-2020-14872

CVSS3: 8.2

ubuntu

около 6 лет назад

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).