PT-2017-1986 · Oracle+2 · Virtualbox+2

Publicado

2017-04-24

·

Atualizado

2019-10-03

·

CVE-2017-3576

CVSS v3.1

8.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.38 Oracle VM VirtualBox versions prior to 5.1.20
Description The issue is related to insufficient access control in the Oracle VM VirtualBox component, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.
Recommendations For versions prior to 5.0.38, update to version 5.0.38 or later. For versions prior to 5.1.20, update to version 5.1.20 or later. As a temporary workaround, consider restricting access to the Oracle VM VirtualBox component until a patch is available.

Exploit

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2017-1916
ALT-PU-2017-1917
ALT-PU-2017-1918
BDU:2017-01151
CVE-2017-3576
MGASA-2017-0135
OPENSUSE-SU-2017_1141-1
OPENSUSE-SU-2017_1142-1

Produtos afetados

Alt Linux
Virtualbox
Suse