High WID-SEC-2024-2008 14 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Jan 16, 2018 · Updated Sep 2, 2024 · Revision 7 · de-DE

Vendor: Oracle Vendor: Red Hat Product: Enterprise Linux Product: Linux Product: Secure Global Desktop Product: VM Virtual Box Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Secure Global Desktop und Oracle VM Virtual Box ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.

Product

Oracle Secure Global Desktop bietet einen sicheren Zugang zu zentralisierten, serverbasierten Windows, UNIX und "leagacy" Applikationen von verschiedenen Client-Geräten.
Oracle VM Virtual Box ist eine Virtualisierungsplattform, die das Host Betriebssystem beinhaltet.

Vulnerabilities 14

Critical 9.8

CVE-2017-5645 Public exploit Scanner template EPSS 89%

Deserialization of Untrusted Data in Log4j

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

Apache Software Foundation Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven

Apr 17, 2017
Medium 5.6

CVE-2017-5715 Public exploit EPSS 73%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Unscored —

CVE-2017-3735 EPSS 21%

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…

OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine

Aug 28, 2017
Unscored —

CVE-2017-3736 EPSS 10%

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before …

OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine

Nov 2, 2017
Unscored —

CVE-2018-2676

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2685

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

virtualbox Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2686

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2687

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2688

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2689

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2690

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2693

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported…

Oracle VM VirtualBox virtualbox-guest-additions-iso virtualbox-guest-additions-iso Virtualization Debian Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2694

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018
Unscored —

CVE-2018-2698 Public exploit

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 18, 2018

Revision history

2024-09-02 #7
Neue Updates von Oracle Linux aufgenommen
2018-06-05 #6
Added references
2018-02-11 #5
Added references
2018-01-21 #4
New remediations available
2018-01-17 #3
New remediations available
2018-01-16 #1
Initial Release
2018-01-16 #2
Version nicht vorhanden

References

Oracle Critical Patch Update Advisory - Januar 2018 - Virtualization vom 2018-01-16
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixOVIR
NetApp Security Advisory NTAP-20180117-0002 vom 2018-01-18
https://security.netapp.com/advisory/ntap-20180117-0002/
Oracle Linux Security Advisory ELSA-2018-0093 vom 2018-01-18
http://linux.oracle.com/errata/ELSA-2018-0093.html
Oracle Linux Security Advisory ELSA-2018-4012 vom 2018-01-19
http://linux.oracle.com/errata/ELSA-2018-4012.html
Red Hat Security Advisory RHSA-2018:1196 vom 2018-04-24
https://access.redhat.com/errata/RHSA-2018:1196
Oracle VM Server für x86 Bulletin - Juli 2019
https://www.oracle.com/technetwork/topics/security/ovmbulletinjul2019-5600406.html
Oracle Linux Security Advisory ELSA-2024-12605 vom 2024-09-02
https://linux.oracle.com/errata/ELSA-2024-12605.html
Oracle Linux Security Advisory ELSA-2024-12604 vom 2024-09-02
https://linux.oracle.com/errata/ELSA-2024-12604.html