CVE-2018-3005 — Corporation VM Virtualbox vulnerability

11 documents6 sources
Severity
4.0MEDIUMNVD
EPSS
0.4%
top 40.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation VM VirtualboxOracle VM Virtualbox
Timeline
PublishedJul 18
Latest updateMay 13

Description

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score …

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.5 | Impact: 1.4

Affected Packages2 packages

▶NVDoracle/vm_virtualbox< 5.2.16
▶CVEListV5oracle_corporation/vm_virtualboxunspecified — 5.2.16

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-h5g6-4mhq-jc8h: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)↗2022-05-13
▶
OSV
CVE-2018-3005: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)↗2018-07-18
▶
CVEList
CVE-2018-3005: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)↗2018-07-18
▶

📋Vendor Advisories

1
Debian
CVE-2018-3005: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su...↗2018
▶

💬Community

6
Bugzilla
CVE-2018-12395 Mozilla: WebExtension bypass of domain restrictions through header rewriting↗2018-10-23
▶
Bugzilla
CVE-2018-12392 Mozilla: Crash with nested event loops↗2018-10-23
▶
Bugzilla
CVE-2018-12397 Mozilla: WebExtension local file permission check bypass↗2018-10-23
▶
Bugzilla
CVE-2018-12396 Mozilla: WebExtension content scripts can execute in disallowed contexts↗2018-10-23
▶
Bugzilla
CVE-2018-12389 Mozilla: Memory safety bugs fixed in Firefox ESR 60.3↗2018-10-23
▶
CVE-2018-3005 — Corporation VM Virtualbox vulnerability | cvebase