Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613.

This update for virtualbox fixes the following issues :

  - The version has been updated from 5.1.8 to 5.1.12.
    Upstream fixed various functional and security issues.

  - Multiple security issues have been fixed that could     cause DoS and possibly privilege escalation     (CVE-2016-5501,CVE-2016-5538,CVE-2016-5605,CVE-2016-5608     ,CVE-2016-5610, CVE-2016-5611,CVE-2016-561313,     boo#1005621)

  - A security warning regarding USB passthru has been     added. It will be shown only the first time virtualbox     is started. (bnc#1018340)

  - Reverted a previously introduced user interface scaling     change, because it caused problems     (https://forums.opensuse.org/showthread.php/521520-Virtu     alBox-interface-scaling, bsc#1014694)

The remote host is affected by the vulnerability described in GLSA-201612-27 (VirtualBox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VirtualBox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Local attackers could cause a Denial of Service condition, execute       arbitrary code, or escalate their privileges.
  Workaround :

    There is no known workaround at this time.

This update for virtualbox fixes the following issues :

  - Fixes     CVE-2016-5501,CVE-2016-5538,CVE-2016-5605,CVE-2016-5608,     CVE-2016-5610,CVE-2016-5611,CVE-2016-5613 (bsc#1005621)

  - Add patch to limit number of simultaneous make jobs.

  - Version bump to 5.1.8 (released 2016-10-18 by Oracle)     This is a maintenance release. The following items were     fixed and/or added: GUI: fixed keyboard shortcut     handling regressions (Mac OS X hosts only; bugs #15937     and #15938) GUI: fixed keyboard handling regression for     separate UI (Windows hosts only; bugs #15928) NAT: don't     exceed the maximum number of 'search' suffixes. Patch     from bug #15948. NAT: fixed parsing of port-forwarding     rules with a name which contains a slash (bug #16002)     NAT Network: when the host has only loopback nameserver     that cannot be mapped to the guests (e.g. dnsmasq     running on 127.0.1.1), make DHCP supply NAT Network DNS     proxy as nameserver. Bridged Network: prevent flooding     syslog with packet allocation error messages (bug     #15569) Audio: now using Audio Queues on Mac OS X hosts     Audio: fixed recording with the PulseAudio backend (5.1     regression) Audio: various bugfixes Snapshots: fixed     regression in 5.1.4 for deleting snapshots with several     disks (bug #15831) Snapshots: crash fix and better error     reporting when snapshot deletion failed Storage: some     fixes for the NVMe emulation with Windows guests API:
    fixed initialization of SAS controllers (bug #15972)     Build system: make it possible to build VBox on systems     which default to Python 3 Windows Additions / VGA: if     the guest's power management turns a virtual screen off,     blank the corresponding VM window rather than hide the     window Windows Additions: fixed a generic bug which     could lead to freezing shared folders (bug #15662) Linux     hosts / guests: fix for kernels with     CONFIG_CPUMASK_OFFSTACK set (bug #16020) Linux     Additions: don't require all virtual consoles be in text     mode. This should fix cases when the guest is booted     with a graphical boot screen (bug #15683) Linux     Additions: added depmod overrides for the vboxguest and     vboxsf kernel modules to fix conflicts with modules     shipped by certain Linux distributions X11 Additions:
    disable 3D on the guest if the host does not provide     enough capabilities (bug #15860) 

  - Builds keep running out of memory when building the web     server part of the package. To help the memory pressure,     I have forced make to run with '-j2', rather than use     the number of processors. Such a change will slow the     build, but will result in a higher rate of success.

  - Increase memory allowed in build to 10000 MB.

  - Remove file 'fix_removal_of_DEFINE_PCI_DEVICE_TABLE' -     fixed upstream.

  - Version bump to 5.1.6 (released 2016-09-12 by Oracle)     This is a maintenance release. The following items were     fixed and/or added: GUI: fixed issue with opening     '.vbox' files and it's aliases GUI: keyboard grabbing     fixes (bugs #15771 and #15745) GUI: fix for passing     through Ctrl + mouse-click (Mac OS X hosts only; bug     #15714) GUI: fixed automatic deletion of extension pack     files (bugs #11352 and #14742) USB: fixed showing     unknown device instead of the manufacturer or product     description under certain circumstances (5.1.0     regression; bug #15764) XHCI: another fix for a hanging     guest under certain conditions as result of the fix for     bug #15747, this time for Windows 7 guests Serial: fixed     high CPU usage with certain USB to serial converters on     Linux hosts (bug #7796) Storage: fixed attaching stream     optimized VMDK images (bug #14764) Storage: reject image     variants which are unsupported by the backend (bug     #7227) Storage: fixed loading saved states created with     VirtualBox 5.0.10 and older when using a SCSI controller     (bug #15865) Storage: fixed broken NVMe emulation if the     host I/O cache setting is enabled Storage: fixed using     multiple NVMe controllers if ICH9 is used NVMe: fixed a     crash during reset which could happen under certain     circumstances Audio: fixed microphone input (5.1.2     regression; bugs #14386 and #15802) Audio: fixed crashes     under certain conditions (5.1.0 regression; bug #15887     and others) Audio: fixed recording with the ALSA backend     (5.1 regression) Audio: fixed stream access mode with     OSS backend (5.1 regression, thanks to Jung-uk Kim)     E1000: do also return masked bits when reading the ICR     register, this fixes booting from iPXE (5.1.2     regression; bug #15846) BIOS: fixed 4bpp scanline     calculation (bug #15787) API: relax the check for the     version attribute in OVF/OVA appliances (bug #15856)     Windows hosts: fixed crashes when terminating the VM     selector or other VBox COM clients (bug #15726 and     others) Linux Installer: fixed path to the documentation     in .rpm packages (5.1.0 regression) Linux Installer:
    fixed the vboxdrv.sh script to prevent an SELinux     complaint (bug #15816) Linux hosts: don't use 32-bit     legacy capabilities Linux Additions: Linux 4.8 fix for     the kernel display driver (bugs #15890 and #15896) Linux     Additions: don't load the kernel modules provided by the     Linux distribution but load the kernel modules from the     official Guest Additions package instead (bug #15324)     Linux Additions: fix dynamic resizing problems in recent     Linux guests (bug #15875) User Manual: fixed error in     the VBoxManage chapter for the getextradata enumerate     example (bug #15862) 

  - Add file 'fix_removal_of_DEFINE_PCI_DEVICE_TABLE' to     compile on kernel 4.8.

This update for virtualbox fixes the following issues :

  - Address CVE-2016-5501, CVE-2016-5538, CVE-2016-5605,     CVE-2016-5608, CVE-2016-5610, CVE-2016-5611,     CVE-2016-5613 (boo#1005621).

  - Reduce memory needs during build.

  - Version bump to 5.0.28 (released 2016-10-18 by Oracle)     This is a maintenance release. The following items were     fixed and/or added: NAT: Don't exceed the maximum number     of 'search' suffixes. Patch from bug #15948. NAT: fixed     parsing of port-forwarding rules with a name which     contains a slash (bug #16002) NAT Network: when the host     has only loopback nameserver that cannot be mapped to     the guests (e.g. dnsmasq running on 127.0.1.1), make     DHCP supply NAT Network DNS proxy as nameserver. Bridged     Network: prevent flooding syslog with packet allocation     error messages (bug #15569) USB: fixed a possible crash     when detaching a USB device Audio: fixes for recording     (Mac OS X hosts only) Audio: now using Audio Queues on     Mac OS X hosts OVF: improve importing of VMs created by     VirtualBox 5.1 VHDX: fixed cloning images with     VBoxManage cloned (bug #14288) Storage: Fixed broken     bandwidth limitation when the limit is very low (bug     #14982) Serial: Fixed high CPU usage with certain USB to     serial converters on Linux hosts (bug #7796) BIOS: fixed     4bpp scanline calculation (bug #15787) VBoxManage: Don't     try to set the medium type if there is no change (bug     #13850) API: fixed initialization of SAS controllers     (bug #15972) Linux hosts: don't use 32-bit legacy     capabilities Linux hosts / guests: fix for kernels with     CONFIG_CPUMASK_OFFSTACK set (bug #16020) Linux     Additions: several fixes for X11 guests running non-root     X servers Linux Additions: fix for Linux 4.7 (bug     #15769) Linux Additions: fix for the display kmod driver     with Linux 4.8 (bugs #15890 and #15896) Windows     Additions: auto-resizing fixes for Windows 10 guests     (bug #15257) Windows Additions: fixes for arranging the     guest screens in multi-screen scenarios Windows     Additions / VGA: if the guest's power management turns a     virtual screen off, blank the corresponding VM window     rather than hide the VM window Windows Additions: fixed     a generic bug which could lead to freezing shared     folders (bug #15662) 

  - Modify virtualbox-guest-preamble and     virtualbox-host-preamble to obsolete old versions of the     kernel modules. This change should fix the problem in     (boo#983629).

The version of the Oracle VM VirtualBox application installed on the remote host is 5.0.x prior to 5.0.28 or 5.1.x prior to 5.1.8. It is, therefore, affected by multiple vulnerabilities :

  - Multiple unspecified flaws exist in the Core     subcomponent that allow a local attacker to gain     elevated privileges. (CVE-2016-5501, CVE-2016-5538)

  - An unspecified flaw exists in the VirtualBox Remote     Desktop Extension (VRDE) subcomponent that allows an     unauthenticated, remote attacker to impact     confidentiality and integrity. (CVE-2016-5605)

  - Multiple unspecified flaws exist in the Core     subcomponent that allow a local attacker to cause a     denial of service condition. (CVE-2016-5608,     CVE-2016-5613)

  - An unspecified flaw exists in the Core subcomponent that     allows a local attacker to impact on integrity and     availability. (CVE-2016-5610)

  - An unspecified flaw exists in the Core subcomponent that     allows a local attacker to disclose sensitive     information. (CVE-2016-5611)

  - A flaw exists in the OpenSSL subcomponent, specifically     within the ssl_parse_clienthello_tlsext() function in     t1_lib.c due, to improper handling of overly large OCSP     Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

ID	Name	Product	Family	Severity
96750	openSUSE Security Update : virtualbox (openSUSE-2017-141)	Nessus	SuSE Local Security Checks	critical
95695	GLSA-201612-27 : VirtualBox: Multiple vulnerabilities (Venom)	Nessus	Gentoo Local Security Checks	medium
95378	openSUSE Security Update : virtualbox (openSUSE-2016-1366)	Nessus	SuSE Local Security Checks	critical
94302	openSUSE Security Update : virtualbox (openSUSE-2016-1226)	Nessus	SuSE Local Security Checks	critical
94168	Oracle VM VirtualBox 5.0.x < 5.0.28 / 5.1.x < 5.1.8 Multiple Vulnerabilities (October 2016 CPU)	Nessus	Misc.	medium

Detections

Analytics

CVE-2016-5608

medium

Tenable Plugins

critical

medium

critical

critical

medium