Debian Virtualbox vulnerabilities

CVE-2025-53029 [LOW] CVE-2025-53029: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result

CVE-2015-4813 [LOW] CVE-2015-4813: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua... Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core. Scope: local sid: resolved (fixed in 5.0.8-dfsg-1)

CVE-2014-2488 [LOW] CVE-2014-2488: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua... Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core. Scope: local sid: resolved (fixed in 4.3.12-dfsg-1)

CVE-2013-0420 [LOW] CVE-2013-0420: virtualbox - Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4... Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect co

CVE-2019-2926 [LOW] CVE-2019-2926: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this

CVE-2024-21253 [LOW] CVE-2024-21253: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can

CVE-2015-0418 [MEDIUM] CVE-2015-0418: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua... Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377. Scope: local sid: resolved (fixed in 4.3.2-dfsg-1)

CVE-2017-3513 [LOW] CVE-2017-3513: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi

CVE-2016-0592 [LOW] CVE-2016-0592: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua... Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core. Scope: local sid: resolved (fixed in 5.0.14-dfsg-1)