A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version 6.1.20-1.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade virtualbox-guest-x11Upgrade python3-virtualboxUpgrade virtualbox-guest-toolsUpgrade virtualbox-guest-desktop-iconsUpgrade virtualbox-develUpgrade virtualbox-guest-sourceUpgrade virtualbox-kmp-defaultUpgrade virtualbox-vncUpgrade virtualboxUpgrade virtualbox-kmp-preemptUpgrade virtualbox-host-sourceUpgrade virtualbox-websrvUpgrade virtualbox-qt | Oct 10, 2021 | May 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub