CVE-2015-0427

EUVD-2015-0440
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:S/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
oraclevm_virtualbox
𝑥
≤ 4.3.18
opensuseopensuse
13.1
opensuseopensuse
13.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
virtualbox
sid/contrib
7.0.20-dfsg-1
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
virtualbox
lucid
dne
precise
not-affected
trusty
Fixed 4.3.10-dfsg-1ubuntu2
released
utopic
Fixed 4.3.18-dfsg-2ubuntu1
released
virtualbox-ose
lucid
not-affected
precise
dne
trusty
dne
utopic
dne
References
http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.securityfocus.com/bid/72216
https://exchange.xforce.ibmcloud.com/vulnerabilities/100181
https://security.gentoo.org/glsa/201612-27
http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.securityfocus.com/bid/72216
https://exchange.xforce.ibmcloud.com/vulnerabilities/100181
https://security.gentoo.org/glsa/201612-27