vulnerability
SUSE: CVE-2019-2511: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Jan 16, 2019 | Jan 26, 2019 | Oct 22, 2021 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jan 16, 2019
Added
Jan 26, 2019
Modified
Oct 22, 2021
Description
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Solutions
suse-upgrade-python3-virtualboxsuse-upgrade-virtualboxsuse-upgrade-virtualbox-develsuse-upgrade-virtualbox-guest-desktop-iconssuse-upgrade-virtualbox-guest-kmp-defaultsuse-upgrade-virtualbox-guest-sourcesuse-upgrade-virtualbox-guest-toolssuse-upgrade-virtualbox-guest-x11suse-upgrade-virtualbox-host-kmp-defaultsuse-upgrade-virtualbox-host-sourcesuse-upgrade-virtualbox-qtsuse-upgrade-virtualbox-vncsuse-upgrade-virtualbox-websrv
References
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.