Candidate: CVE-2017-10129
PublicDate: 2017-08-08 15:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10129
 http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA
Description:
 Vulnerability in the Oracle VM VirtualBox component of Oracle
 Virtualization (subcomponent: Core). The supported version that is affected
 is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged
 attacker with logon to the infrastructure where Oracle VM VirtualBox
 executes to compromise Oracle VM VirtualBox. While the vulnerability is in
 Oracle VM VirtualBox, attacks may significantly impact additional products.
 Successful attacks of this vulnerability can result in takeover of Oracle
 VM VirtualBox. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and
 Availability impacts). CVSS Vector:
 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H [8.8 HIGH]

Patches_virtualbox:
upstream_virtualbox: released (5.1.24-dfsg-1)
precise/esm_virtualbox: DNE
trusty_virtualbox: ignored (reached end-of-life)
trusty/esm_virtualbox: DNE (trusty was needed)
vivid/ubuntu-core_virtualbox: DNE
xenial_virtualbox: not-affected (5.1.38-dfsg-0ubuntu1.16.04.1)
yakkety_virtualbox: ignored (reached end-of-life)
zesty_virtualbox: ignored (reached end-of-life)
artful_virtualbox: ignored (reached end-of-life)
bionic_virtualbox: not-affected (5.1.38-dfsg-0ubuntu1.16.04.1)
cosmic_virtualbox: not-affected (5.1.38-dfsg-0ubuntu1.16.04.1)
disco_virtualbox: not-affected (5.1.38-dfsg-0ubuntu1.16.04.1)
devel_virtualbox: not-affected (5.1.38-dfsg-0ubuntu1.16.04.1)