Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[ GLSA 202101-09 ] VirtualBox
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index News & Announcements
View previous topic :: View next topic  
Author Message
GLSA
Advocate
Advocate


Joined: 12 May 2004
Posts: 2550

PostPosted: Tue Jan 12, 2021 7:26 pm    Post subject: [ GLSA 202101-09 ] VirtualBox Reply with quote

Gentoo Linux Security Advisory

Title: VirtualBox: Multiple vulnerabilities (GLSA 202101-09)
Severity: normal
Exploitable: remote
Date: 2021-01-12
Bug(s): #714064, #717626, #717782, #733924
ID: 202101-09

Synopsis

Multiple vulnerabilities have been found in VirtualBox, the worst
of which could allow an attacker to take control of VirtualBox.


Background

VirtualBox is a powerful virtualization product from Oracle.

Affected Packages

Package: app-emulation/virtualbox
Vulnerable: < 6.1.12
Unaffected: >= 6.1.12
Unaffected: >= 6.0.24
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in VirtualBox. Please
review the CVE identifiers referenced below for details.


Impact

An attacker could take control of VirtualBox resulting in the execution
of arbitrary code with the privileges of the process, a Denial of Service
condition, or other unspecified impacts.


Workaround

There is no known workaround at this time.

Resolution

All Virtualbox 6.0.x users should upgrade to the latest version:
Code:
# emerge --sync
      # emerge --ask --oneshot --verbose
      ">=app-emulation/virtualbox-6.0.24:0/6.0"
   
All Virtualbox 6.1.x users should upgrade to the latest version:
Code:
# emerge --sync
      # emerge --ask --oneshot --verbose
      ">=app-emulation/virtualbox-6.1.12:0/6.1"
   


References

CVE-2019-2848
CVE-2019-2850
CVE-2019-2859
CVE-2019-2863
CVE-2019-2864
CVE-2019-2865
CVE-2019-2866
CVE-2019-2867
CVE-2019-2873
CVE-2019-2874
CVE-2019-2875
CVE-2019-2876
CVE-2019-2877
CVE-2019-2926
CVE-2019-2944
CVE-2019-2984
CVE-2019-3002
CVE-2019-3005
CVE-2019-3017
CVE-2019-3021
CVE-2019-3026
CVE-2019-3028
CVE-2019-3031
CVE-2020-14628
CVE-2020-14629
CVE-2020-14646
CVE-2020-14647
CVE-2020-14648
CVE-2020-14649
CVE-2020-14650
CVE-2020-14673
CVE-2020-14674
CVE-2020-14675
CVE-2020-14676
CVE-2020-14677
CVE-2020-14694
CVE-2020-14695
CVE-2020-14698
CVE-2020-14699
CVE-2020-14700
CVE-2020-14703
CVE-2020-14704
CVE-2020-14707
CVE-2020-14711
CVE-2020-14712
CVE-2020-14713
CVE-2020-14714
CVE-2020-14715
CVE-2020-2575
CVE-2020-2674
CVE-2020-2678
CVE-2020-2681
CVE-2020-2682
CVE-2020-2689
CVE-2020-2690
CVE-2020-2691
CVE-2020-2692
CVE-2020-2693
CVE-2020-2698
CVE-2020-2701
CVE-2020-2702
CVE-2020-2703
CVE-2020-2704
CVE-2020-2705
CVE-2020-2725
CVE-2020-2726
CVE-2020-2727
CVE-2020-2741
CVE-2020-2742
CVE-2020-2743
CVE-2020-2748
CVE-2020-2758
CVE-2020-2894
CVE-2020-2902
CVE-2020-2905
CVE-2020-2907
CVE-2020-2908
CVE-2020-2909
CVE-2020-2910
CVE-2020-2911
CVE-2020-2913
CVE-2020-2914
CVE-2020-2929
CVE-2020-2951
CVE-2020-2958
CVE-2020-2959
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index News & Announcements All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum