← Retour aux CVEs

CVE-2019-2446

N/A

Description

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Details CVE

Score CVSS v3.1N/A

Publie1/16/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

oracle:vm_virtualbox

References

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html(secalert_us@oracle.com)

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html(secalert_us@oracle.com)

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html(secalert_us@oracle.com)

http://www.securityfocus.com/bid/106568(secalert_us@oracle.com)

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/106568(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.