CVE-2019-2511: High severity oracle virtualbox vulnerability
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2511?
CVE-2019-2511 is classified as easily exploitable and allows for unauthorized access, indicating a high severity level.
How do I fix CVE-2019-2511?
To mitigate CVE-2019-2511, upgrade Oracle VM VirtualBox to version 5.2.24 or 6.0.2 or later.
What types of systems are affected by CVE-2019-2511?
CVE-2019-2511 affects Oracle VM VirtualBox versions prior to 5.2.24 and 6.0.2.
Can CVE-2019-2511 be exploited remotely?
Yes, CVE-2019-2511 can be exploited by an unauthenticated attacker with network access via SOAP.
What are the potential impacts of CVE-2019-2511?
Exploitation of CVE-2019-2511 can lead to a complete compromise of the Oracle VM VirtualBox component.