DeutschShown in its original language — a full translation is planned for a future version.
Oracle Virtualization: Mehrere Schwachstellen
view advisory published 2018-01-16
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Secure Global Desktop und Oracle VM Virtual Box ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-2698US | high8.8 | Exploit | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2694US | high8.8 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2693US | high8.2 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported versions that are affected are Prior to 5.1.32 and Prior to… | ||||
| CVE-2018-2690US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2689US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2688US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2687US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2686US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2685US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2676US | high8.2 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2017-5715US | medium5.6 | Exploit | ||
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access v… | ||||
| CVE-2017-3736US | medium6.5 | — | ||
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that… | ||||
| CVE-2017-3735US | medium5.3 | — | ||
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Thi… | ||||
| CVE-2017-5645US | critical9.8 | Exploit | ||
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payloa… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2018-0093 vom 2018-01-18external
- Oracle Linux Security Advisory ELSA-2018-4012 vom 2018-01-19external
- Oracle Critical Patch Update Advisory - Januar 2018 - Virtualization vom 2018-01-16external
- Red Hat Security Advisory RHSA-2018:1196 vom 2018-04-24external
- Oracle Linux Security Advisory ELSA-2024-12604 vom 2024-09-02external
- Oracle Linux Security Advisory ELSA-2024-12605 vom 2024-09-02external
- NetApp Security Advisory NTAP-20180117-0002 vom 2018-01-18external
- WID-SEC-W-2024-2008 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan