PT-2017-1985 · Oracle+2 · Virtualbox+2

Publicado

2017-04-24

·

Atualizado

2019-10-03

·

CVE-2017-3587

CVSS v3.1

8.4

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20
Description The issue is related to insufficient access control in the Shared Folder component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized access to critical data, including creation, deletion, or modification, as well as the ability to cause a hang or crash of Oracle VM VirtualBox. This can significantly impact additional products.
Recommendations For versions prior to 5.0.38, update to version 5.0.38 or later. For versions prior to 5.1.20, update to version 5.1.20 or later. As a temporary workaround, consider restricting access to the Shared Folder component until a patch is available.

Exploit

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2017-1916
ALT-PU-2017-1917
ALT-PU-2017-1918
BDU:2017-01150
CVE-2017-3587
MGASA-2017-0135
OPENSUSE-SU-2017_1141-1
OPENSUSE-SU-2017_1142-1

Produtos afetados

Alt Linux
Virtualbox
Suse