Multiple vulnerabilities in Oracle VM VirtualBox

Description

Multiple serious vulnerabilities have been found in Oracle VM VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, gain privileges, read and write local files.

Below is a complete list of vulnerabilities:

1. Multiple unspecified vulnerabilities in the Core component can be exploited locally to gain privileges;
2. An unspecified vulnerability in the Core component can be exploited remotely to cause denial of service, obtain sensitive information, read and write local files;
3. An unspecified vulnerability in the Core component can be exploited remotely to obtain sensitive information.

Original advisories

• Oracle Critical Patch Update Advisory – April 2018

Exploitation

Public exploits exist for this vulnerability.

Related products

• Oracle-VirtualBox

CVE list

• CVE-2018-2835
  critical
• CVE-2018-2836
  critical
• CVE-2018-2837
  critical
• CVE-2018-0739
  high
• CVE-2018-2842
  critical
• CVE-2018-2843
  critical
• CVE-2018-2844
  critical
• CVE-2018-2845
  high
• CVE-2018-2860
  critical
• CVE-2018-2830
  critical
• CVE-2018-2831
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com