PT-2015-2794 · Oracle+1 · Virtualbox+1

Published 2015-07-16 · Updated 2019-02-05 · CVE-2015-2594

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 4.0.32 Oracle VM VirtualBox versions prior to 4.1.40 Oracle VM VirtualBox versions prior to 4.2.32 Oracle VM VirtualBox versions prior to 4.3.30

Description The issue is related to unspecified errors in the code of the Oracle VM VirtualBox component. It allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core. Exploitation of this issue may enable a local attacker to compromise information security.

Recommendations For versions prior to 4.0.32, update to version 4.0.32 or later. For versions prior to 4.1.40, update to version 4.1.40 or later. For versions prior to 4.2.32, update to version 4.2.32 or later. For versions prior to 4.3.30, update to version 4.3.30 or later.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2015-1736

ALT-PU-2015-1737

ALT-PU-2015-1738

ALT-PU-2015-1739

ALT-PU-2015-1740

BDU:2015-12159

CVE-2015-2594

DLA-313-1

DSA-3359-1

Affected Products

Alt Linux

Virtualbox

References · 25

• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Vendor Advisory
• http://debian.org/security/2015/dsa-3359 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1739 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-2594 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-2594 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-2594 · Security Note
• https://bdu.fstec.ru/vul/2015-12106 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307 · Security Note
• https://osv.dev/vulnerability/DSA-3359-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3359-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1738 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2015-1736 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12159 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1737 · Vendor Advisory