CVE-2016-5501: High severity oracle virtualbox vulnerability

Q: What is the severity of CVE-2016-5501?

CVE-2016-5501 has a medium severity level, impacting confidentiality, integrity, and availability for local users.

Q: How do I fix CVE-2016-5501?

To fix CVE-2016-5501, upgrade Oracle VM VirtualBox to version 5.0.28 or later or 5.1.8 or later.

Q: Which versions of Oracle VM VirtualBox are affected by CVE-2016-5501?

CVE-2016-5501 affects Oracle VM VirtualBox versions prior to 5.0.28 and 5.1.x versions before 5.1.8.

Q: What vectors allow exploitation of CVE-2016-5501?

CVE-2016-5501 can be exploited through unspecified vectors related to the Core component of Oracle VM VirtualBox.

Q: Is CVE-2016-5501 more severe than CVE-2016-5538?

CVE-2016-5501 is considered a different vulnerability with distinct impacts compared to CVE-2016-5538.

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.

Affected Software

2 affected components

Oracle VM VirtualBox>=5.0.0<5.0.28

Oracle VM VirtualBox>=5.1.0<5.1.8

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5501?

CVE-2016-5501 has a medium severity level, impacting confidentiality, integrity, and availability for local users.

How do I fix CVE-2016-5501?