Vulnerability CVE-2016-5611

Vulnerability Name:

CVE-2016-5611 (CCN-118096)

Assigned:

2016-10-18

Published:

2016-10-18

Updated:

2019-03-04

Summary:

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.

CVSS v3 Severity:

4.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)
3.8 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

4.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)
3.8 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-200

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2016-5611

Source: CCN
Type: Oracle CPUOct2016
Oracle Critical Patch Update Advisory - October 2016

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Source: BID
Type: Third Party Advisory, VDB Entry
93744

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1037053

Source: XF
Type: UNKNOWN
oracle-cpuoct2016-cve20165611(118096)

Source: GENTOO
Type: Third Party Advisory
GLSA-201612-27

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-5611

Vulnerable Configuration:

Configuration 1:

cpe:/a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* (Version >= 5.0.0 and < 5.0.28)

OR cpe:/a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* (Version >= 5.1.0 and < 5.1.8)

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20165611	V	CVE-2016-5611	2022-06-30
oval:org.opensuse.security:def:380	P	virtualbox-guest-tools-6.1.32-lp154.1.83 on GA media (Moderate)	2022-06-10
oval:org.opensuse.security:def:113226	P	python-virtualbox-5.1.10-2.5 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:106644	P	python-virtualbox-5.1.10-2.5 on GA media (Moderate)	2021-10-01
oval:com.ubuntu.cosmic:def:201656110000000	V	CVE-2016-5611 on Ubuntu 18.10 (cosmic) - medium.	2016-10-25
oval:com.ubuntu.artful:def:20165611000	V	CVE-2016-5611 on Ubuntu 17.10 (artful) - medium.	2016-10-25
oval:com.ubuntu.trusty:def:20165611000	V	CVE-2016-5611 on Ubuntu 14.04 LTS (trusty) - medium.	2016-10-25
oval:com.ubuntu.bionic:def:201656110000000	V	CVE-2016-5611 on Ubuntu 18.04 LTS (bionic) - medium.	2016-10-25
oval:com.ubuntu.bionic:def:20165611000	V	CVE-2016-5611 on Ubuntu 18.04 LTS (bionic) - medium.	2016-10-25
oval:com.ubuntu.xenial:def:20165611000	V	CVE-2016-5611 on Ubuntu 16.04 LTS (xenial) - medium.	2016-10-25
oval:com.ubuntu.xenial:def:201656110000000	V	CVE-2016-5611 on Ubuntu 16.04 LTS (xenial) - medium.	2016-10-25
oval:com.ubuntu.cosmic:def:20165611000	V	CVE-2016-5611 on Ubuntu 18.10 (cosmic) - medium.	2016-10-25
oval:com.ubuntu.disco:def:201656110000000	V	CVE-2016-5611 on Ubuntu 19.04 (disco) - medium.	2016-10-25
oval:com.ubuntu.precise:def:20165611000	V	CVE-2016-5611 on Ubuntu 12.04 LTS (precise) - medium.	2016-10-25

BACK