PRIOn knowledge basePRION:CVE-2015-0377Design/Logic Flaw
5.6 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
34.8%
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 7.0 | |
| opensuse | eq | 13.1 | |
| opensuse | eq | 13.2 | |
| vm_virtualbox | eq | 4.0.0 | |
| vm_virtualbox | eq | 4.0.22 | |
| vm_virtualbox | eq | 4.1.4 | |
| vm_virtualbox | eq | 4.1.12 | |
| vm_virtualbox | eq | 4.0.2 | |
| vm_virtualbox | eq | 4.0.24 | |
| vm_virtualbox | eq | 4.1.6 |
References
lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
secunia.com/advisories/62694
www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf
www.debian.org/security/2015/dsa-3143
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
www.securityfocus.com/bid/72219
exchange.xforce.ibmcloud.com/vulnerabilities/100176
security.gentoo.org/glsa/201612-27
Related
5.6 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
34.8%