PT-2015-2517 · Oracle · Virtualbox

Publicado 2015-10-21 · Atualizado 2016-12-24 · CVE-2015-4856

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 4.0.30 Oracle VM VirtualBox versions prior to 4.1.38 Oracle VM VirtualBox versions prior to 4.2.30 Oracle VM VirtualBox versions prior to 4.3.26 Oracle VM VirtualBox versions prior to 5.0.0

Description The issue is related to errors in the code of the Core component in Oracle VM VirtualBox, allowing local users to affect availability via unknown vectors. This can lead to a denial of service.

Recommendations For versions prior to 4.0.30, update to version 4.0.30 or later. For versions prior to 4.1.38, update to version 4.1.38 or later. For versions prior to 4.2.30, update to version 4.2.30 or later. For versions prior to 4.3.26, update to version 4.3.26 or later. For versions prior to 5.0.0, update to version 5.0.0 or later.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-11882

CVE-2015-4856

Produtos afetados

Virtualbox

Referências · 11

• https://ubuntu.com/security/CVE-2015-4856 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixDB · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4856 · Aviso do Fabricante
• http://oracle.com/technetwork/topics/security/alerts-086861.html · Nota
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-4856 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4856 · Nota
• https://bdu.fstec.ru/vul/2015-11882 · Nota de Segurança
• http://securitytracker.com/id/1033880 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4856 · Nota de Segurança
• https://oracle.com/security-alerts/cpuoct2015.html · Nota