Test ID:	1.3.6.1.4.1.25623.1.1.10.2014.0184
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2014-0184)
Summary:	The remote host is missing an update for the 'kmod-vboxadditions, kmod-virtualbox, virtualbox' package(s) announced via the MGASA-2014-0184 advisory.
Description:	Summary: The remote host is missing an update for the 'kmod-vboxadditions, kmod-virtualbox, virtualbox' package(s) announced via the MGASA-2014-0184 advisory. Vulnerability Insight: Multiple vulnerabilities in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core (CVE-2013-5892, CVE-2014-0404, CVE-2014-0405, CVE-2014-0406, CVE-2014-0407). VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a CR_MESSAGE_READBACK or CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption (CVE-2014-0981). Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled (CVE-2014-0983). The virtualbox packages has been updated to 4.3.10 maintenance release that resolves these issues and other upstream reported issues (for more info check the referenced changelog). This update also resolves the following: - load virtualbox modules on install (mga#8826) - missing GUI translations (mga#12578) Affected Software/OS: 'kmod-vboxadditions, kmod-virtualbox, virtualbox' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5892 BugTraq ID: 64758 http://www.securityfocus.com/bid/64758 BugTraq ID: 64909 http://www.securityfocus.com/bid/64909 Debian Security Information: DSA-2878 (Google Search) http://www.debian.org/security/2014/dsa-2878 http://osvdb.org/102057 http://www.securitytracker.com/id/1029610 http://secunia.com/advisories/56490 XForce ISS Database: oracle-cpujan2014-cve20135892(90368) https://exchange.xforce.ibmcloud.com/vulnerabilities/90368 Common Vulnerability Exposure (CVE) ID: CVE-2014-0404 BugTraq ID: 64911 http://www.securityfocus.com/bid/64911 http://osvdb.org/102061 XForce ISS Database: oracle-cpujan2014-cve20140404(90372) https://exchange.xforce.ibmcloud.com/vulnerabilities/90372 Common Vulnerability Exposure (CVE) ID: CVE-2014-0405 BugTraq ID: 64900 http://www.securityfocus.com/bid/64900 http://osvdb.org/102059 XForce ISS Database: oracle-cpujan2014-cve20140405(90370) https://exchange.xforce.ibmcloud.com/vulnerabilities/90370 Common Vulnerability Exposure (CVE) ID: CVE-2014-0406 BugTraq ID: 64905 http://www.securityfocus.com/bid/64905 http://osvdb.org/102060 XForce ISS Database: oracle-cpujan2014-cve20140406(90371) https://exchange.xforce.ibmcloud.com/vulnerabilities/90371 Common Vulnerability Exposure (CVE) ID: CVE-2014-0407 BugTraq ID: 64913 http://www.securityfocus.com/bid/64913 http://osvdb.org/102058 XForce ISS Database: oracle-cpujan2014-cve20140407(90369) https://exchange.xforce.ibmcloud.com/vulnerabilities/90369 Common Vulnerability Exposure (CVE) ID: CVE-2014-0981 Bugtraq: 20140311 CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/531418/100/0/threaded Debian Security Information: DSA-2904 (Google Search) http://www.debian.org/security/2014/dsa-2904 http://www.exploit-db.com/exploits/32208 http://seclists.org/fulldisclosure/2014/Mar/95 https://security.gentoo.org/glsa/201612-27 http://www.coresecurity.com/advisories/oracle-virtualbox-3d-acceleration-multiple-memory-corruption-vulnerabilities http://secunia.com/advisories/57384 Common Vulnerability Exposure (CVE) ID: CVE-2014-0983
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.