vulnerability

SUSE: CVE-2021-25319: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
May 5, 2021
Added
Oct 10, 2021
Modified
Oct 26, 2022

Description

A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version 6.1.20-1.1 and prior versions.

Solutions

suse-upgrade-python3-virtualboxsuse-upgrade-virtualboxsuse-upgrade-virtualbox-develsuse-upgrade-virtualbox-guest-desktop-iconssuse-upgrade-virtualbox-guest-sourcesuse-upgrade-virtualbox-guest-toolssuse-upgrade-virtualbox-guest-x11suse-upgrade-virtualbox-host-sourcesuse-upgrade-virtualbox-kmp-defaultsuse-upgrade-virtualbox-kmp-preemptsuse-upgrade-virtualbox-qtsuse-upgrade-virtualbox-vncsuse-upgrade-virtualbox-websrv
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.