CVE-2015-4896

2015-10-2123:59:56

[email protected]

web.nvd.nist.gov

cve-2015-4896

oracle

vm virtualbox

vulnerability

remote attackers

availability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.

Affected configurations

NVD

Node

oraclevm_virtualboxRange4.0.0–4.0.34

oraclevm_virtualboxRange4.1.0–4.1.42

oraclevm_virtualboxRange4.2.0–4.2.34

oraclevm_virtualboxRange4.3.0–4.3.32

oraclevm_virtualboxRange5.0.0–5.0.8

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

CPENameOperatorVersion
oracle:vm_virtualboxoracle vm virtualboxlt4.0.34
oracle:vm_virtualboxoracle vm virtualboxlt4.1.42
oracle:vm_virtualboxoracle vm virtualboxlt4.2.34
oracle:vm_virtualboxoracle vm virtualboxlt4.3.32
oracle:vm_virtualboxoracle vm virtualboxlt5.0.8

CPE	Name	Operator	Version
oracle:vm_virtualbox	oracle vm virtualbox	lt	4.0.34
oracle:vm_virtualbox	oracle vm virtualbox	lt	4.1.42
oracle:vm_virtualbox	oracle vm virtualbox	lt	4.2.34
oracle:vm_virtualbox	oracle vm virtualbox	lt	4.3.32
oracle:vm_virtualbox	oracle vm virtualbox	lt	5.0.8