DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Oracle Virtualization: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2018-01-16
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Secure Global Desktop und Oracle VM Virtual Box ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-2698US | high8.8 | Exploit | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2694US | high8.8 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2693US | high8.2 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported versions that are affected are Prior to 5.1.32 and Prior to… | ||||
| CVE-2018-2690US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2689US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2688US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2687US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2686US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2685US | high8.6 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2018-2676US | high8.2 | — | ||
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easi… | ||||
| CVE-2017-5715US | medium5.6 | Exploit | ||
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access v… | ||||
| CVE-2017-3736US | medium6.5 | — | ||
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that… | ||||
| CVE-2017-3735US | medium5.3 | — | ||
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Thi… | ||||
| CVE-2017-5645US | critical9.8 | Exploit | ||
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payloa… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2018-0093 vom 2018-01-18external
- Oracle Linux Security Advisory ELSA-2018-4012 vom 2018-01-19external
- Oracle Critical Patch Update Advisory - Januar 2018 - Virtualization vom 2018-01-16external
- Red Hat Security Advisory RHSA-2018:1196 vom 2018-04-24external
- Oracle Linux Security Advisory ELSA-2024-12604 vom 2024-09-02external
- Oracle Linux Security Advisory ELSA-2024-12605 vom 2024-09-02external
- NetApp Security Advisory NTAP-20180117-0002 vom 2018-01-18external
- WID-SEC-W-2024-2008 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan