← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to active/CVE-2018-2845

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
active/CVE-2018-2845
1
 
Candidate: CVE-2018-2845
2
 
PublicDate: 2018-04-18
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2845
5
 
 http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
6
 
Description:
7
 
 Vulnerability in the Oracle VM VirtualBox component of Oracle
8
 
 Virtualization (subcomponent: Core). Supported versions that are affected
9
 
 are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability
10
 
 allows low privileged attacker with logon to the infrastructure where
11
 
 Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.
12
 
 Successful attacks of this vulnerability can result in unauthorized ability
13
 
 to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM
14
 
 VirtualBox as well as unauthorized update, insert or delete access to some
15
 
 of Oracle VM VirtualBox accessible data and unauthorized read access to a
16
 
 subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.6
17
 
 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
18
 
 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H).
19
 
Ubuntu-Description:
20
 
Notes:
21
 
Bugs:
22
 
Priority: medium
23
 
Discovered-by: Reno Robert
24
 
Assigned-to:
25
 
 
26
 
Patches_virtualbox:
27
 
upstream_virtualbox: needs-triage
28
 
precise/esm_virtualbox: DNE
29
 
trusty_virtualbox: needs-triage
30
 
xenial_virtualbox: needs-triage
31
 
artful_virtualbox: needs-triage
32
 
bionic_virtualbox: needs-triage
33
 
devel_virtualbox: needs-triage