Oracle VM VirtualBox up to 5.2.33/6.0.13 information disclosure

A vulnerability has been found in Oracle VM VirtualBox up to 5.2.33/6.0.13 (Virtualization Software) and classified as critical. This vulnerability affects an unknown code. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. As an impact it is known to affect confidentiality.

The weakness was published 10/16/2019 as Oracle Critical Patch Update Advisory - October 2019 as confirmed advisory (Website). The advisory is available at oracle.com. This vulnerability was named CVE-2019-1547. The exploitation appears to be difficult. Local access is required to approach this attack. The successful exploitation requires a single authentication. The technical details are unknown and an exploit is not available.

Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Similar entries are available at 141538, 143620, 143661 and 143632.

Type

• Virtualization Software

Vendor

• Oracle

Name

• VM VirtualBox

• 🔒
• 🔒
• 🔒

• 🔒
• 🔒
• 🔒

VulDB Meta Base Score: 4.7
VulDB Meta Temp Score: 4.5

VulDB Base Score: 4.7
VulDB Temp Score: 4.5
VulDB Vector: 🔒
VulDB Reliability: 🔍

Vendor Base Score (Oracle): 4.7
Vendor Vector (Oracle): 🔒

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Information disclosure (CWE-200)
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

Reaction Time: 🔒
0-Day Time: 🔒
Exposure Time: 🔒

10/16/2019 Advisory disclosed
10/16/2019 +0 days Countermeasure disclosed
10/16/2019 +0 days VulDB entry created
10/16/2019 +0 days VulDB last updateVendor: oracle.com

Advisory: Oracle Critical Patch Update Advisory - October 2019
Status: Confirmed

CVE: CVE-2019-1547 (🔒)
See also: 🔒

Created: 10/16/2019 09:38 PM
Complete: 🔍

Comments

Comments are closed.