CVE-2014-6588 — Oracle VM Virtualbox vulnerability

25 documents5 sources

Severity

3.2LOWNVD

EPSS

0.1%

top 76.63%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN Virtualbox Oracle VM Virtualbox Opensuse

Timeline

PublishedJan 21

Latest updateMay 14

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.

CVSS vector

AV:L/AC:L/C:N/I:P/A:PExploitability: 3.1 | Impact: 4.9

Affected Packages3 packages

▶NVDoracle/vm_virtualbox4.3.18

▶Ubuntusun/virtualbox< 4.3.10-dfsg-1ubuntu2

▶NVDopensuse/opensuse13.1, 13.2+1

🔴Vulnerability Details

GHSA

GHSA-65xc-7xv6-p626: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2022-05-14

▶

GHSA

GHSA-p593-3hwx-qcvm: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2022-05-14

▶

GHSA

GHSA-v98g-2jg8-r9w5: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4↗2022-05-14

▶

GHSA

GHSA-rwhj-8rr4-42w6: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2022-05-14

▶

GHSA

GHSA-xp47-99f7-8pwf: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2022-05-14

▶

📋Vendor Advisories

Debian

CVE-2015-0427: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2015

▶

Debian

CVE-2014-6588: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2014

▶

Debian

CVE-2014-6589: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2014

▶

Debian

CVE-2014-6590: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2014

▶

Debian

CVE-2014-6595: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2014

▶