PT-2019-1266 · Oracle+2 · Virtualbox+2

Publicado

2019-01-16

·

Atualizado

2020-08-24

·

CVE-2019-2527

CVSS v3.1

6.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.26 Oracle VM VirtualBox versions prior to 6.0.4
Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, which can be exploited to cause the application to hang or crash. This can be achieved by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed. Successful exploitation can result in unauthorized ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox.
Recommendations For versions prior to 5.2.26, update to version 5.2.26 or later. For versions prior to 6.0.4, update to version 6.0.4 or later.

Correção

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2019-1244
ALT-PU-2019-1245
ALT-PU-2019-1246
ALT-PU-2019-1247
ALT-PU-2019-1248
BDU:2019-00454
CVE-2019-2527
MGASA-2019-0055
OPENSUSE-SU-2019:1547-1
OPENSUSE-SU-2019:1814-1
OPENSUSE-SU-2019_0084-1
OPENSUSE-SU-2019_1547-1
OPENSUSE-SU-2019_1814-1

Produtos afetados

Alt Linux
Virtualbox
Suse