PT-2014-2983 · Oracle+1 · Virtualbox+1

Matthew Daley · Published 2014-01-07 · Updated 2017-08-29 · CVE-2013-5892

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:L/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.20 Oracle VM VirtualBox versions prior to 4.0.22 Oracle VM VirtualBox versions prior to 4.1.30 Oracle VM VirtualBox versions prior to 4.2.22 Oracle VM VirtualBox versions prior to 4.3.6

Description The issue affects confidentiality, integrity, and availability. It is related to the Core component, but the specific vectors are unknown.

Recommendations For versions prior to 3.2.20, update to version 3.2.20 or later. For versions prior to 4.0.22, update to version 4.0.22 or later. For versions prior to 4.1.30, update to version 4.1.30 or later. For versions prior to 4.2.22, update to version 4.2.22 or later. For versions prior to 4.3.6, update to version 4.3.6 or later.

Fix

Related Identifiers

ALT-PU-2014-1004

ALT-PU-2014-1005

ALT-PU-2014-1006

ALT-PU-2014-1007

ALT-PU-2014-1008

CVE-2013-5892

DSA-2878-1

MGASA-2014-0184

Affected Products

Alt Linux

Virtualbox

References · 27

• https://advisories.mageia.org/MGASA-2014-0184.html · Security Note
• https://ubuntu.com/security/CVE-2013-5892 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-5892 · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0184 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5892 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-1005 · Vendor Advisory
• http://oracle.com/technetwork/topics/security/cpujan2014-1972949.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1006 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1007 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5892 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-5892 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1008 · Vendor Advisory
• http://debian.org/security/2014/dsa-2878 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=12384 · Note