Oracle VM VirtualBox < 3.2.18 / 4.0.20 / 4.1.28 / 4.2.18 Local DoS

low Nessus Plugin ID 68984

Synopsis

The remote Windows host has an application that is affected by a local denial of service vulnerability.

Description

The remote host contains a version of Oracle VM VirtualBox earlier than 3.2.18 / 4.0.20 / 4.1.28 / 4.2.18. As such, it is potentially affected by a local denial of service vulnerability when handling a tracepath.

Solution

Upgrade to Oracle VM VirtualBox to 3.2.18 / 4.0.20 / 4.1.28 / 4.2.18 or later.

See Also

http://www.nessus.org/u?079368e6

https://seclists.org/oss-sec/2013/q3/38

https://www.virtualbox.org/wiki/Changelog

https://www.virtualbox.org/ticket/11863

Plugin Details

Severity: Low

ID: 68984

File Name: virtualbox_4_2_16.nasl

Version: 1.8

Type: local

Agent: windows

Family: Windows

Published: 7/20/2013

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.2

CVSS v2

Risk Factor: Low

Base Score: 3.8

Temporal Score: 3

Vector: CVSS2#AV:L/AC:H/Au:S/C:N/I:N/A:C

Vulnerability Information

CPE: cpe:/a:oracle:vm_virtualbox

Required KB Items: VirtualBox/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/11/2013

Vulnerability Publication Date: 6/13/2013

Reference Information

CVE: CVE-2013-3792

BID: 60794