MGASA-2018-0257: kmod-vboxadditions Mageia
Vulnerability summary
MGASA-2018-0257 is a vulnerability in kmod-vboxadditions Mageia with no CVSS score yet.
Advisory lineage
Upstream 11 · Downstream 0Timeline
- 29-05-2018PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated virtualbox packages fix security vulnerabilities This update provides virtualbox 5.2.12 and fixes the following security issues: Unauthorized remote attacker may have caused a hang or frequently repeatable crash (complete DOS) (CVE-2018-0739). Attacker with host login may have compromised Virtualbox or further system services after interaction with a third user (CVE-2018-2830). Attacker with host login may have compromised VirtualBox or further system services, allowing read access to some data (CVE-2018-2831). Attacker with host login may have gained control over VirtualBox and possibly further system services after interacting with a third user (CVE-2018-2835, CVE-2018-2836, CVE-2018-2837, CVE-2018-2842, CVE-2018-2843, CVE-2018-2844). Attacker with host login may have caused a hang or frequently repeatable crash (complete DOS), and perform unauthorized read and write operation to some VirtualBox accessible data (CVE-2018-2845). Privileged attacker may have gained control over VirtualBox and possibly further system services (CVE-2018-2860). For other fixes in this update, see the referenced changelog
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia3 products
- kmod-vboxadditions< 5.2.12-1.mga6
- kmod-virtualbox< 5.2.12-1.mga6
- virtualbox< 5.2.12-1.mga6
1 vendor · 3 products