CVE-2014-6589

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:S/C:N/I:P/A:P
oracleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
VendorProductVersion
opensuseopensuse
13.1
opensuseopensuse
13.2
oraclevm_virtualbox
𝑥
≤ 4.3.18
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
virtualbox
sid/contrib
7.0.20-dfsg-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
virtualbox
utopic
Fixed 4.3.18-dfsg-2ubuntu1
released
trusty
Fixed 4.3.10-dfsg-1ubuntu2
released
precise
not-affected
lucid
dne
virtualbox-ose
utopic
dne
trusty
dne
precise
dne
lucid
ignored
References
http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
https://security.gentoo.org/glsa/201612-27
http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
https://security.gentoo.org/glsa/201612-27