<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#CCCCCC">
<div class="moz-cite-prefix">On 01/21/2015 12:53 PM, Moritz
Muehlenhoff wrote:<br>
</div>
<blockquote
cite="mid:20150121072340.944.54648.reportbug@m25s06.vlinux.de"
type="cite">
<pre wrap="">Package: virtualbox
Severity: grave
Tags: security
Justification: user security hole
No specific details available yet:
<a class="moz-txt-link-freetext" href="http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html">http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html</a>
Cheers,
Moritz
</pre>
</blockquote>
<br>
The following matrix is what I could grab.<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixOVIR">http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixOVIR</a><br>
<br>
<table summary="Oracle Risk Matrix" class="texta" border="1"
cellspacing="0">
<tbody style="background-color: #ffffff;">
<tr>
<td style="padding: 1px; text-align: center;" height="54"
valign="middle"><span style="white-space: nowrap">CVE-2014-6595</span></td>
<td style="padding: 1px; text-align: center;" valign="middle">Oracle
VM VirtualBox</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">VMSVGA
device</td>
<td style="padding: 1px; text-align: center;" valign="middle">No</td>
<td style="padding: 1px; text-align: center;" valign="middle">3.2</td>
<td style="padding: 1px; text-align: center;" valign="middle">Local</td>
<td style="padding: 1px; text-align: center;" valign="middle">Low</td>
<td style="padding: 1px; text-align: center;" valign="middle">Single</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">VirtualBox
prior to 4.3.20</td>
<td style="padding: 1px; text-align: center;" valign="middle">See
Note 3</td>
</tr>
<tr>
<td style="padding: 1px; text-align: center;" height="54"
valign="middle"><span style="white-space: nowrap">CVE-2014-6588</span></td>
<td style="padding: 1px; text-align: center;" valign="middle">Oracle
VM VirtualBox</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">VMSVGA
device</td>
<td style="padding: 1px; text-align: center;" valign="middle">No</td>
<td style="padding: 1px; text-align: center;" valign="middle">3.2</td>
<td style="padding: 1px; text-align: center;" valign="middle">Local</td>
<td style="padding: 1px; text-align: center;" valign="middle">Low</td>
<td style="padding: 1px; text-align: center;" valign="middle">Single</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">VirtualBox
prior to 4.3.20</td>
<td style="padding: 1px; text-align: center;" valign="middle">See
Note 3</td>
</tr>
<tr>
<td style="padding: 1px; text-align: center;" height="54"
valign="middle"><span style="white-space: nowrap">CVE-2014-6589</span></td>
<td style="padding: 1px; text-align: center;" valign="middle">Oracle
VM VirtualBox</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">VMSVGA
device</td>
<td style="padding: 1px; text-align: center;" valign="middle">No</td>
<td style="padding: 1px; text-align: center;" valign="middle">3.2</td>
<td style="padding: 1px; text-align: center;" valign="middle">Local</td>
<td style="padding: 1px; text-align: center;" valign="middle">Low</td>
<td style="padding: 1px; text-align: center;" valign="middle">Single</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">VirtualBox
prior to 4.3.20</td>
<td style="padding: 1px; text-align: center;" valign="middle">See
Note 3</td>
</tr>
<tr>
<td style="padding: 1px; text-align: center;" height="54"
valign="middle"><span style="white-space: nowrap">CVE-2014-6590</span></td>
<td style="padding: 1px; text-align: center;" valign="middle">Oracle
VM VirtualBox</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">VMSVGA
device</td>
<td style="padding: 1px; text-align: center;" valign="middle">No</td>
<td style="padding: 1px; text-align: center;" valign="middle">3.2</td>
<td style="padding: 1px; text-align: center;" valign="middle">Local</td>
<td style="padding: 1px; text-align: center;" valign="middle">Low</td>
<td style="padding: 1px; text-align: center;" valign="middle">Single</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">VirtualBox
prior to 4.3.20</td>
<td style="padding: 1px; text-align: center;" valign="middle">See
Note 3</td>
</tr>
<tr>
<td style="padding: 1px; text-align: center;" height="54"
valign="middle"><span style="white-space: nowrap">CVE-2015-0427</span></td>
<td style="padding: 1px; text-align: center;" valign="middle">Oracle
VM VirtualBox</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">VMSVGA
device</td>
<td style="padding: 1px; text-align: center;" valign="middle">No</td>
<td style="padding: 1px; text-align: center;" valign="middle">3.2</td>
<td style="padding: 1px; text-align: center;" valign="middle">Local</td>
<td style="padding: 1px; text-align: center;" valign="middle">Low</td>
<td style="padding: 1px; text-align: center;" valign="middle">Single</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">VirtualBox
prior to 4.3.20</td>
<td style="padding: 1px; text-align: center;" valign="middle">See
Note 3</td>
</tr>
<tr>
<td style="padding: 1px; text-align: center;" height="54"
valign="middle"><span style="white-space: nowrap">CVE-2015-0418</span></td>
<td style="padding: 1px; text-align: center;" valign="middle">Oracle
VM VirtualBox</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Core</td>
<td style="padding: 1px; text-align: center;" valign="middle">No</td>
<td style="padding: 1px; text-align: center;" valign="middle">2.1</td>
<td style="padding: 1px; text-align: center;" valign="middle">Local</td>
<td style="padding: 1px; text-align: center;" valign="middle">Low</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">None</td>
<td style="padding: 1px; text-align: center;" valign="middle">Partial+</td>
<td style="padding: 1px; text-align: center;" valign="middle">VirtualBox
prior to 3.2.26, 4.0.28, 4.1.36, 4.2.28</td>
<td style="padding: 1px; text-align: center;" valign="middle"> </td>
</tr>
</tbody>
</table>
<p> </p>
<p><strong>Notes:</strong></p>
<ol>
<li style="list-style-type: decimal; margin-left: 25px;
margin-bottom: 4px;">This fix also addresses CVE-2014-0231,
CVE-2014-0118 and CVE-2014-5704.</li>
<li style="list-style-type: decimal; margin-left: 25px;
margin-bottom: 4px;">This fix also addresses CVE-2014-0221,
CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and
CVE-2014-0076.</li>
<li style="list-style-type: decimal; margin-left: 25px;
margin-bottom: 4px;">VMSVGA virtual graphics device is not
documented and is disabled by default.</li>
</ol>
<br>
<br>
@Moritz: There's nothing more detailed than the statement that all
versions proior to 4.3.20 are vulnerable. <br>
4.3.20 is in experimental right now.<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Ritesh Raj Sarraf
RESEARCHUT - <a class="moz-txt-link-freetext" href="http://www.researchut.com">http://www.researchut.com</a>
"Necessity is the mother of invention."
</pre>
</body>
</html>