6.9 - DSA-2904

Executive Summary

Summary
Title	virtualbox security update

Informations
Name	DSA-2904	First vendor Publication	2014-04-15
Vendor	Debian	Last vendor Modification	2014-04-15
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	6.9	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	3.4	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Francisco Falcon discovered that missing input sanisiting in the 3D acceleration code in VirtualBox could lead to the execution of arbitrary code on the host system.

For the oldstable distribution (squeeze), these problems have been fixed in version 3.2.10-dfsg-1+squeeze3.

For the stable distribution (wheezy), these problems have been fixed in version 4.1.18-dfsg-2+deb7u3.

For the testing distribution (jessie), these problems have been fixed in version 4.3.10-dfsg-1.

For the unstable distribution (sid), these problems have been fixed in version 4.3.10-dfsg-1.

We recommend that you upgrade your virtualbox packages.

Original Source

Url : http://www.debian.org/security/2014/dsa-2904

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-399	Resource Management Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:24026

Oval ID:	oval:org.mitre.oval:def:24026
Title:	Vulnerability in the VirtualBox component in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8 when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server (CVE-2014-0983)
Description:	Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled by the (1) CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to the crServerDispatchVertexAttrib1dARB function, (3) CR_VERTEXATTRIB1FARB_OPCODE to the crServerDispatchVertexAttrib1fARB function, (4) CR_VERTEXATTRIB1SARB_OPCODE to the crServerDispatchVertexAttrib1sARB function, (5) CR_VERTEXATTRIB2DARB_OPCODE to the crServerDispatchVertexAttrib2dARB function, (6) CR_VERTEXATTRIB2FARB_OPCODE to the crServerDispatchVertexAttrib2fARB function, (7) CR_VERTEXATTRIB2SARB_OPCODE to the crServerDispatchVertexAttrib2sARB function, (8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to the crServerDispatchVertexAttrib3fARB function, (10) CR_VERTEXATTRIB3SARB_OPCODE to the crServerDispatchVertexAttrib3sARB function, (11) CR_VERTEXATTRIB4DARB_OPCODE to the crServerDispatchVertexAttrib4dARB function, (12) CR_VERTEXATTRIB4FARB_OPCODE to the crServerDispatchVertexAttrib4fARB function, and (13) CR_VERTEXATTRIB4SARB_OPCODE to the crServerDispatchVertexAttrib4sARB function.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0983	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	VirtualBox
Definition Synopsis:
VirtualBox is installed AND Check if Oracle VM VirtualBox is installed Check versions of VirtualBox Affected versions of VirtualBox Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0 AND Check if Oracle VM VirtualBox version is less than or equals to 4.2.20 OR Affected versions of VirtualBox Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0 AND Check if Oracle VM VirtualBox version is less than or equals to 4.3.6

Definition Id: oval:org.mitre.oval:def:24120

Oval ID:	oval:org.mitre.oval:def:24120
Title:	Vulnerability in the VirtualBox component in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8 when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server (CVE-2014-0981)
Description:	VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption. NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0981	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	VirtualBox
Definition Synopsis:
VirtualBox is installed AND Check if Oracle VM VirtualBox is installed Check versions of VirtualBox Affected versions of VirtualBox Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0 AND Check if Oracle VM VirtualBox version is less than or equals to 4.2.20 OR Affected versions of VirtualBox Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0 AND Check if Oracle VM VirtualBox version is less than or equals to 4.3.6

Definition Id: oval:org.mitre.oval:def:24607

Oval ID:	oval:org.mitre.oval:def:24607
Title:	DSA-2904-1 virtualbox - security update
Description:	Francisco Falcon discovered that missing input sanitising in the 3Dacceleration code in VirtualBox could lead to the execution of arbitrary code on the host system.
Family:	unix	Class:	patch
Reference(s):	DSA-2904-1 CVE-2014-0981 CVE-2014-0983	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/Linux 7 Debian GNU/kFreeBSD 6.0 Debian GNU/kFreeBSD 7	Product(s):	virtualbox-ose virtualbox
Definition Synopsis:
Debian 6.0 release section Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND virtualbox-ose DPKG is earlier than 0:3.2.10-dfsg-1+squeeze3 AND Debian 7.x release section Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND virtualbox DPKG is earlier than 0:4.1.18-dfsg-2+deb7u3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Oracle Vm Virtualbox cpe:2.3:a:oracle:vm_virtualbox:4.3.6:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.3.4:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.3.2:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.3.0:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.8:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.6:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.4:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.20:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.2:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.18:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.16:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.14:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.12:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.10:::::::* cpe:2.3:a:oracle:vm_virtualbox:4.2.0:::::::*	15

ExploitDB Exploits

id	Description
2014-03-12	Oracle VirtualBox 3D Acceleration - Multiple Vulnerabilities

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-04-17	IAVM : 2014-A-0058 - Multiple Vulnerabilities in Oracle & Sun Systems Product Suite Severity : Category I - VMSKEY : V0049579

Nessus® Vulnerability Scanner

Date	Description
2016-12-12	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201612-27.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote host has an application that is affected by multiple memory corrup... File : virtualbox_4_3_8.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2904.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-04-17 13:25:51	Multiple Updates
2014-04-15 17:19:50	First insertion

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	3
CPE ID(s)	15
ExploitDB Exploit(s)	1
IAVM(s)	1
Nessus® Exploit(s)	3

	Related
6.9	CVE-2014-0983
4.4	CVE-2014-0981
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)

6.9 - DSA-2904

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

ExploitDB Exploits

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU