CVE-2020-2682

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.36 Oracle VM VirtualBox versions prior to 6.0.16 Oracle VM VirtualBox versions prior to 6.1.2

Description The issue is related to a lack of protection for internal data in the Core component of Oracle VM VirtualBox. This can be exploited by an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability can be easily exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, potentially leading to a takeover of Oracle VM VirtualBox.

Recommendations For versions prior to 5.2.36, update to version 5.2.36 or later. For versions prior to 6.0.16, update to version 6.0.16 or later. For versions prior to 6.1.2, update to version 6.1.2 or later.