CVE-2012-3221
published 2012-10-17CVE-2012-3221: Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via…
PriorityP49low2.1CVSS 2.0
AVLACLAuNCNINAP
EXPLOIT
EPSS
0.79%
52.2th percentile
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | virtualbox | < virtualbox 4.1.18-dfsg-1.1 (sid) | virtualbox 4.1.18-dfsg-1.1 (sid) |
| oracle | virtualization | — | — |
| oracle | virtualization | — | — |
| oracle | virtualization | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
vendor_debian2.1LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pxpj-94wm-p9ff: Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3
ghsa_unreviewed·2022-05-17
CVE-2012-3221 [LOW] GHSA-pxpj-94wm-p9ff: Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."
Debian
CVE-2012-3221: virtualbox - Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtu...
vendor_debian·2012·CVSS 2.1
CVE-2012-3221 [LOW] CVE-2012-3221: virtualbox - Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtu...
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."
Scope: local
sid: resolved (fixed in 4.1.18-dfsg-1.1)
No detection rules found.
No writeups or analysis indexed.
http://www.debian.org/security/2012/dsa-2594http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlhttp://www.securityfocus.com/bid/56045http://www.securitytracker.com/id?1027666https://exchange.xforce.ibmcloud.com/vulnerabilities/79380https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16681http://www.debian.org/security/2012/dsa-2594http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlhttp://www.securityfocus.com/bid/56045http://www.securitytracker.com/id?1027666https://exchange.xforce.ibmcloud.com/vulnerabilities/79380https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16681
2012-10-17
Published