[ GLSA 201401-13 ] VirtualBox: Multiple Vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: VirtualBox: Multiple Vulnerabilities (GLSA 201401-13)
Severity: high
Exploitable: local
Date: January 20, 2014
Bug(s): #434872, #498166
ID: 201401-13

Synopsis

Multiple vulnerabilities have been found in VirtualBox, allowing
local attackers to escalate their privileges or cause a Denial of Service
condition.


Background

VirtualBox is a powerful virtualization product from Oracle.

Affected Packages

Package: app-emulation/virtualbox
Vulnerable: < 4.2.22
Unaffected: >= 4.2.22
Architectures: All supported architectures

Package: app-emulation/virtualbox-bin
Vulnerable: < 4.2.22
Unaffected: >= 4.2.22
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Virtualbox. Please
review the CVE identifiers referenced below for details.


Impact

A local attacker in a guest virtual machine may be able to escalate
privileges or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All virtualbox users should upgrade to the latest version: