PT-2015-2794 · Oracle+1 · Virtualbox+1

Publicado 2015-07-16 · Atualizado 2019-02-05 · CVE-2015-2594

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 4.0.32 Oracle VM VirtualBox versions prior to 4.1.40 Oracle VM VirtualBox versions prior to 4.2.32 Oracle VM VirtualBox versions prior to 4.3.30

Description The issue is related to unspecified errors in the code of the Oracle VM VirtualBox component. It allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core. Exploitation of this issue may enable a local attacker to compromise information security.

Recommendations For versions prior to 4.0.32, update to version 4.0.32 or later. For versions prior to 4.1.40, update to version 4.1.40 or later. For versions prior to 4.2.32, update to version 4.2.32 or later. For versions prior to 4.3.30, update to version 4.3.30 or later.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1736

ALT-PU-2015-1737

ALT-PU-2015-1738

ALT-PU-2015-1739

ALT-PU-2015-1740

BDU:2015-12159

CVE-2015-2594

DLA-313-1

DSA-3359-1

Produtos afetados

Alt Linux

Virtualbox

Referências · 25

• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Aviso do Fabricante
• http://debian.org/security/2015/dsa-3359 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2015-1739 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-2594 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-2594 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2594 · Nota
• https://cve.org/CVERecord?id=CVE-2015-2594 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-12106 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-3359-1 · Aviso do Fabricante
• http://securityfocus.com/bid/75899 · Nota
• https://security-tracker.debian.org/tracker/DSA-3359-1 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2015-2594 · Nota
• https://errata.altlinux.org/ALT-PU-2015-1738 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html · Aviso do Fabricante