CVE-2016-3597
published 2016-07-21CVE-2016-3597: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via…
PriorityP416medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
EPSS
0.39%
31.1th percentile
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | virtualbox | < virtualbox 5.1.4-dfsg-1 (sid) | virtualbox 5.1.4-dfsg-1 (sid) |
| oracle | vm_virtualbox | <= 5.0.24 | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
vendor_debian5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2016-3597: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...
vendor_debian·2016·CVSS 5.5
CVE-2016-3597 [MEDIUM] CVE-2016-3597: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua...
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.
Scope: local
sid: resolved (fixed in 5.1.4-dfsg-1)
GHSA
GHSA-49qm-9p7h-mwpv: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5
ghsa_unreviewed·2022-05-17
CVE-2016-3597 [MEDIUM] GHSA-49qm-9p7h-mwpv: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securityfocus.com/bid/91864http://www.securitytracker.com/id/1036384http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securityfocus.com/bid/91864http://www.securitytracker.com/id/1036384
2016-07-21
Published