drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in VirtualBox
Name: |
Ausführen beliebiger Kommandos in VirtualBox |
|
ID: |
DSA-3274-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian sid, Debian wheezy, Debian jessie |
|
Datum: |
Fr, 29. Mai 2015, 06:22 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456 |
|
Applikationen: |
VirtualBox |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3274-1 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff May 28, 2015 http://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : virtualbox CVE ID : CVE-2015-3456
Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential privilege escalation.
For the oldstable distribution (wheezy), this problem has been fixed in version 4.1.18-dfsg-2+deb7u5.
For the stable distribution (jessie), this problem has been fixed in version 4.3.18-dfsg-3+deb8u2.
For the unstable distribution (sid), this problem has been fixed in version 4.3.28-dfsg-1.
We recommend that you upgrade your virtualbox packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBAgAGBQJVZ4W5AAoJEBDCk7bDfE42H3UP/01HvE6NBAxILIG59waLVfhS H8melBbEHZZ8mAbKkzMbnQaiPjibnu3qH+1mUuFy3S8vH85cG/+0N9jWbrCQyc4U byywL/TFKS7jKjHO2zGR+tw9WVrxKe94P05o2U1vskeDG3p60Vb7lxzRPiTNSdwD a7T4T9ab57j4Nrn5Sxr3le6Bjw9YCDMVrJmKdLGTBYgXFZz8ShihnDmhwFSrHvbZ eT3eNGkiCiNT2u4qxVNRtaETmYR6Q5nL9qQzYitIfEpSd/mrRL7dmvkRg4oEw3iH VU+wX8zpU9G3SoQTML5hEPvFVlgk855a2fEx81cfL6P4oOVU2/g0tsJoMdX0KQ0x euOcvRHk7q6KScr5fkc+T3ZScz9IKUuFlCml+7lHRCbOfzOszcU1bJQNFfEA+TW9 h9U0gLa2hUoeU3r97tMoaBeoDZR2PnWTvUxn0l4wae/UcxbGi0Hp6roBqPWub036 f8kIcutsMiL+r3A6L3q3damBDU4rtAt1bt4unvUCbMea9fF4NzrR4+eISt6Pyp6Q hYn6XZrmAtZH6169dqmjJZLtUQDevMKo8zExt5PaBoiabKRwhCB6kSTUjiTU3rGW 87XG2X3kw/8eAyBxSB5Zka2RjujUlaA3hgz20z2jj+gzqEH1PUQrezDKQz+hgZZD AFIVk5GpQSnviJjNjxgZ =334W -----END PGP SIGNATURE-----
-- To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: https://lists.debian.org/20150528211743.GA16877@pisco.westfalen.local
|
|
|
|