Vulnerability CVE-2016-5545: Information

Description

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).

Severity: MEDIUM (6.3) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-5545

Published: Jan. 28, 2017

Modified: March 4, 2019

Error type identifier: CWE-254

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
kernel-modules-virtualbox-addition-std-def	sisyphus	5.1.14-alt1.263212.1.1	7.0.14-alt1.393561.1	ALT-PU-2017-1084-1	177130	Fixed
kernel-modules-virtualbox-addition-std-def	p10	5.1.14-alt1.263212.1.1	6.1.50-alt1.330453.1	ALT-PU-2017-1084-1	177130	Fixed
kernel-modules-virtualbox-addition-std-def	p9	5.1.14-alt1.263212.1.1	6.1.26-alt1.328978.1	ALT-PU-2017-1084-1	177130	Fixed
kernel-modules-virtualbox-addition-std-def	p8	5.1.18-alt1.263223.0.M80P.2	5.2.42-alt1.264785.0.M80P.1	ALT-PU-2017-1321-1	179889	Fixed
kernel-modules-virtualbox-addition-std-def	c9f2	5.1.14-alt1.263212.1.1	6.1.46-alt1.330454.0.c9f.2	ALT-PU-2017-1084-1	177130	Fixed
kernel-modules-virtualbox-addition-un-def	sisyphus	5.1.14-alt1.264453.1	7.0.14-alt1.394781.1	ALT-PU-2017-1083-1	177130	Fixed
kernel-modules-virtualbox-addition-un-def	p10	5.1.14-alt1.264453.1	6.1.50-alt1.393557.1	ALT-PU-2017-1083-1	177130	Fixed
kernel-modules-virtualbox-addition-un-def	p9	5.1.14-alt1.264453.1	6.1.26-alt1.330455.1	ALT-PU-2017-1083-1	177130	Fixed
kernel-modules-virtualbox-addition-un-def	p8	5.1.18-alt1.264464.0.M80P.1	5.2.42-alt1.267318.0.M80P.1	ALT-PU-2017-1320-1	179889	Fixed
kernel-modules-virtualbox-addition-un-def	c10f1	5.1.14-alt1.264453.1	6.1.46-alt1.393557.0.c10f.1	ALT-PU-2017-1083-1	177130	Fixed
kernel-modules-virtualbox-addition-un-def	c9f2	5.1.14-alt1.264453.1	6.1.46-alt1.330269.2	ALT-PU-2017-1083-1	177130	Fixed
kernel-modules-virtualbox-addition-un-def	c7	5.1.18-alt1.263227.0.M70C.2	5.1.24-alt1.264725.0.M70C.1	ALT-PU-2017-1527-1	181545	Fixed
kernel-modules-virtualbox-std-def	sisyphus	5.1.14-alt1.263212.1.1	7.0.14-alt1.393561.1	ALT-PU-2017-1081-1	177130	Fixed
kernel-modules-virtualbox-std-def	p10	5.1.14-alt1.263212.1.1	6.1.50-alt1.330453.1	ALT-PU-2017-1081-1	177130	Fixed
kernel-modules-virtualbox-std-def	p9	5.1.14-alt1.263212.1.1	6.1.26-alt1.328978.1	ALT-PU-2017-1081-1	177130	Fixed
kernel-modules-virtualbox-std-def	p8	5.1.18-alt1.263223.0.M80P.2	5.2.42-alt1.264785.0.M80P.1	ALT-PU-2017-1318-1	179889	Fixed
kernel-modules-virtualbox-std-def	c9f2	5.1.14-alt1.263212.1.1	6.1.46-alt1.330454.0.c9f.2	ALT-PU-2017-1081-1	177130	Fixed
kernel-modules-virtualbox-un-def	sisyphus	5.1.14-alt1.264453.1	7.0.14-alt1.394781.1	ALT-PU-2017-1082-1	177130	Fixed
kernel-modules-virtualbox-un-def	p10	5.1.14-alt1.264453.1	6.1.50-alt1.393557.1	ALT-PU-2017-1082-1	177130	Fixed
kernel-modules-virtualbox-un-def	p9	5.1.14-alt1.264453.1	6.1.26-alt1.330455.1	ALT-PU-2017-1082-1	177130	Fixed
kernel-modules-virtualbox-un-def	p8	5.1.18-alt1.264464.0.M80P.1	5.2.42-alt1.267318.0.M80P.1	ALT-PU-2017-1319-1	179889	Fixed
kernel-modules-virtualbox-un-def	c10f1	5.1.14-alt1.264453.1	6.1.46-alt1.393557.0.c10f.1	ALT-PU-2017-1082-1	177130	Fixed
kernel-modules-virtualbox-un-def	c9f2	5.1.14-alt1.264453.1	6.1.46-alt1.330269.2	ALT-PU-2017-1082-1	177130	Fixed
kernel-modules-virtualbox-un-def	c7	5.1.18-alt1.263227.0.M70C.2	5.1.24-alt1.264725.0.M70C.1	ALT-PU-2017-1528-1	181545	Fixed
virtualbox	sisyphus	5.1.14-alt1	7.0.14-alt2	ALT-PU-2017-1080-1	177130	Fixed
virtualbox	p10	5.1.14-alt1	6.1.50-alt1	ALT-PU-2017-1080-1	177130	Fixed
virtualbox	p9	5.1.14-alt1	6.1.26-alt1	ALT-PU-2017-1080-1	177130	Fixed
virtualbox	p8	5.1.18-alt1.M80P.1	5.2.42-alt2	ALT-PU-2017-1317-1	179889	Fixed
virtualbox	c10f1	5.1.14-alt1	6.1.46-alt1	ALT-PU-2017-1080-1	177130	Fixed
virtualbox	c9f2	5.1.14-alt1	6.1.46-alt1	ALT-PU-2017-1080-1	177130	Fixed
virtualbox	c7	5.1.18-alt1.M70C.1	5.1.24-alt1.M70C.1	ALT-PU-2017-1525-1	181545	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html	Patch Vendor Advisory
95590	Third Party Advisory VDB Entry
1037638	Third Party Advisory VDB Entry
GLSA-201702-08	Third Party Advisory

Affected configurations:
1. Configuration 1
  cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
  Start including
  5.0.0
  End excliding
  5.0.32
  cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
  Start including
  5.1.0
  End excliding
  5.1.14

Version: v24.4.2

Vulnerability CVE-2016-5545: Information

Description

Fixed packages

References to Advisories, Solutions, and Tools

Configuration 1