CVE-2014-2486 — Path Traversal in Oracle VM Virtualbox

CWE-22 — Path TraversalCWE-693 — Protection Mechanism Failure12 documents7 sources
Severity
3.6LOWNVD
NVD3.0GHSA9.8
EPSS
0.1%
top 76.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN VirtualboxOracle VM Virtualbox
Timeline
PublishedJul 17
Latest updateMay 24

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2477.

CVSS vector

AV:L/AC:M/C:N/I:P/A:PExploitability: 2.7 | Impact: 4.9

Affected Packages2 packages

▶NVDoracle/vm_virtualbox3.2.22+62
▶Ubuntusun/virtualbox< 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1

🔴Vulnerability Details

7
GHSA
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins↗2022-05-24
▶
GHSA
GHSA-mhxv-5q9h-hp9c: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3↗2022-05-14
▶
GHSA
GHSA-cfv3-vpqw-2xgj: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3↗2022-05-14
▶
CVEList
CVE-2014-2486: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3↗2014-07-17
▶
OSV
CVE-2014-2486: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3↗2014-07-17
▶

📋Vendor Advisories

2
Debian
CVE-2014-2486: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2014
▶
Debian
CVE-2014-2477: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2014
▶
CVE-2014-2486 — Path Traversal in Oracle VM Virtualbox | cvebase