Syed Faraz Abrar

A flaw exists in the MCTP (Management Component Transport Protocol) implementation where `RTM GETNEIGH` requests return uninitialized data within the padding bytes of the `ndmsg` data. This occurs because netlink data in the link, address, and neighbor response messages were not properly initialized to zero.

A difficult to exploit vulnerability in Oracle VM VirtualBox allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data.