CVE-2016-5545
published 2017-01-27CVE-2016-5545: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to…
PriorityP432medium6.3CVSS 3.0
AVNACLPRNUIRSUCLILAL
EPSS
1.49%
71.2th percentile
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts).
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | virtualbox | < virtualbox 5.1.14-dfsg-1 (sid) | virtualbox 5.1.14-dfsg-1 (sid) |
| oracle | vm_virtualbox | — | — |
| oracle | vm_virtualbox | — | — |
| oracle | vm_virtualbox | >= 5.0.0 < 5.0.32 | 5.0.32 |
| oracle | vm_virtualbox | >= 5.1.0 < 5.1.14 | 5.1.14 |
CVSS provenance
nvdv3.06.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_debian6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2016-5545: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su...
vendor_debian·2016·CVSS 6.3
CVE-2016-5545 [MEDIUM] CVE-2016-5545: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su...
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Avail
VulDB
Oracle VM VirtualBox up to 5.0.31/5.1.13 GUI 7pk security (Nessus ID 96609 / ID 169734)
vuldb·2026-05-15·CVSS 6.3
CVE-2016-5545 [MEDIUM] Oracle VM VirtualBox up to 5.0.31/5.1.13 GUI 7pk security (Nessus ID 96609 / ID 169734)
A vulnerability described as critical has been identified in Oracle VM VirtualBox up to 5.0.31/5.1.13. This affects an unknown part of the component GUI. Such manipulation leads to 7pk security features.
This vulnerability is uniquely identified as CVE-2016-5545. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
GHSA
GHSA-69h5-w3p2-p3cx: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI)
ghsa_unreviewed·2022-05-14
CVE-2016-5545 [MEDIUM] GHSA-69h5-w3p2-p3cx: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI)
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS v3.0 Base Score 6.3 (Confidentiality, Integrity and Avail
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlhttp://www.securityfocus.com/bid/95590http://www.securitytracker.com/id/1037638https://security.gentoo.org/glsa/201702-08http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.htmlhttp://www.securityfocus.com/bid/95590http://www.securitytracker.com/id/1037638https://security.gentoo.org/glsa/201702-08
2017-01-27
Published