← Volver a CVEs

CVE-2020-14647

HIGH

7.5

Descripcion

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).

Detalles CVE

Puntuacion CVSS v3.17.5

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadHIGH

Privilegios requeridosHIGH

Interaccion usuarioNONE

Publicado7/15/2020

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

opensuse:leaporacle:vm_virtualbox

Referencias

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html(secalert_us@oracle.com)

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html(secalert_us@oracle.com)

https://security.gentoo.org/glsa/202101-09(secalert_us@oracle.com)

https://www.oracle.com/security-alerts/cpujul2020.html(secalert_us@oracle.com)

https://www.zerodayinitiative.com/advisories/ZDI-20-890/(secalert_us@oracle.com)

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00068.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00079.html(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202101-09(af854a3a-2127-422b-91ae-364da2661108)

https://www.oracle.com/security-alerts/cpujul2020.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-20-890/(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.