CVE-2016-5545 — Oracle VM Virtualbox vulnerability

CWE-2544 documents4 sources

Severity

6.3MEDIUMNVD

EPSS

0.6%

top 31.32%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle VM Virtualbox

Timeline

PublishedJan 27

Latest updateMay 14

Description

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶NVDoracle/vm_virtualbox5.0.0 — 5.0.32+1

▶CVEListV5oracle/vm_virtualboxprior to 5.0.32, prior to 5.1.14+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-69h5-w3p2-p3cx: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI)↗2022-05-14

▶

CVEList

CVE-2016-5545: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI)↗2017-01-27

▶

📋Vendor Advisories

Debian

CVE-2016-5545: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su...↗2016

▶