CVE-2015-4856 — Oracle VM Virtualbox vulnerability

5 documents5 sources
Severity
4.9MEDIUMNVD
EPSS
0.2%
top 61.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN VirtualboxOracle VM Virtualbox
Timeline
PublishedOct 21
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.30, 4.1.38, 4.2.30, 4.3.26, and 5.0.0 allows local users to affect availability via unknown vectors related to Core.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages2 packages

▶NVDoracle/vm_virtualbox4 versions+3
▶Ubuntusun/virtualbox< 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-44wm-6fqr-h267: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2022-05-17
▶
CVEList
CVE-2015-4856: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2015-10-21
▶
OSV
CVE-2015-4856: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4↗2015-10-21
▶

📋Vendor Advisories

1
Debian
CVE-2015-4856: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...↗2015
▶
CVE-2015-4856 — Oracle VM Virtualbox vulnerability | cvebase