CVE-2018-2831 — Oracle VM Virtualbox vulnerability

11 documents6 sources
Severity
3.8LOWNVD
EPSS
0.1%
top 70.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle VM Virtualbox
Timeline
PublishedApr 19
Latest updateMay 13

Description

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can res…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:NExploitability: 2.0 | Impact: 1.4

Affected Packages1 packages

▶NVDoracle/vm_virtualbox5.1.0 — 5.1.36+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-gjhj-xh35-7m33: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)↗2022-05-13
▶
OSV
CVE-2018-2831: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)↗2018-04-19
▶
CVEList
CVE-2018-2831: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)↗2018-04-19
▶

📋Vendor Advisories

1
Debian
CVE-2018-2831: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su...↗2018
▶

💬Community

6
Bugzilla
CVE-2018-14952 squirrelmail: persistent XSS in message display via a "<math><maction xlink:href="↗2018-08-14
▶
Bugzilla
CVE-2018-14954 squirrelmail: persistent XSS in message display the formaction attribute↗2018-08-14
▶
Bugzilla
CVE-2018-14955 squirrelmail: persistent XSS in message display via SVG animations↗2018-08-14
▶
Bugzilla
CVE-2018-14951 squirrelmail: persistent XSS in message display via a "<form action='data:text"↗2018-08-14
▶
Bugzilla
CVE-2018-14953 squirrelmail: persistent XSS in message display via a "<math xlink:href="↗2018-08-14
▶
CVE-2018-2831 — Oracle VM Virtualbox vulnerability | cvebase