CVE-2012-3221: Low severity oracle virtualization vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."

Affected Software

3 affected components

Oracle Virtualization=3.2

Oracle Virtualization=4.0

Oracle Virtualization=4.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3221?

CVE-2012-3221 is classified as a vulnerability that can potentially affect the availability of the Oracle VM Virtual Box.

How do I fix CVE-2012-3221?

To fix CVE-2012-3221, you should update your Oracle Virtualization software to the latest available version that addresses this vulnerability.

What versions of Oracle Virtualization are affected by CVE-2012-3221?

CVE-2012-3221 affects Oracle Virtualization versions 3.2, 4.0, and 4.1.

Who should be concerned about CVE-2012-3221?

Local users of the affected versions of Oracle VM Virtual Box should be concerned about CVE-2012-3221 due to potential impact on system availability.

Is there a public exploit for CVE-2012-3221?

As of now, there has been no public exploit released for CVE-2012-3221, but the vulnerability itself poses a risk.