CVE-2020-14711: Medium severity oracle virtualbox vulnerability
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: The CVE-2020-14711 is applicable to macOS host only. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14711?
CVE-2020-14711 is considered an easily exploitable vulnerability that can allow high privileged attackers access to the infrastructure.
Which versions of Oracle VM VirtualBox are affected by CVE-2020-14711?
CVE-2020-14711 affects versions prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12 of Oracle VM VirtualBox.
How do I fix CVE-2020-14711?
The recommended fix for CVE-2020-14711 is to upgrade Oracle VM VirtualBox to versions 5.2.44, 6.0.24, or 6.1.12 or later.
Is CVE-2020-14711 specific to certain operating systems?
CVE-2020-14711 is not specific to operating systems, but it does affect Oracle VM VirtualBox installations on several environments.
What are the potential impacts of CVE-2020-14711?
The potential impacts of CVE-2020-14711 include unauthorized access and exploitation of the underlying infrastructure by a high privileged attacker.