Security Information / 2012 / Security Information -- DSA-2594-1 virtualbox-ose

Debian Security Advisory

DSA-2594-1 virtualbox-ose -- programming error

Date Reported:

30 Dec 2012

Affected Packages:

virtualbox-ose

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2012-3221.

More information:

halfdog discovered that incorrect interrupt handling in VirtualBox, a x86 virtualization solution, can lead to denial of service.

For the stable distribution (squeeze), this problem has been fixed in version 3.2.10-dfsg-1+squeeze1.

For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 4.1.18-dfsg-1.1 of the virtualbox source package.

We recommend that you upgrade your virtualbox-ose packages.