CVE-2014-0406
First published: Wed Jan 15 2014(Updated: )
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0404.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle VirtualBox | <=4.1.28 | |
| Oracle VirtualBox | =4.1.0 | |
| Oracle VirtualBox | =4.1.2 | |
| Oracle VirtualBox | =4.1.4 | |
| Oracle VirtualBox | =4.1.6 | |
| Oracle VirtualBox | =4.1.8 | |
| Oracle VirtualBox | =4.1.10 | |
| Oracle VirtualBox | =4.1.12 | |
| Oracle VirtualBox | =4.1.14 | |
| Oracle VirtualBox | =4.1.16 | |
| Oracle VirtualBox | =4.1.18 | |
| Oracle VirtualBox | =4.1.20 | |
| Oracle VirtualBox | =4.1.22 | |
| Oracle VirtualBox | =4.1.24 | |
| Oracle VirtualBox | =4.1.26 | |
| Oracle VirtualBox | <=4.3.2 | |
| Oracle VirtualBox | =4.3.0 | |
| Oracle VirtualBox | <=3.2.18 | |
| Oracle VirtualBox | =3.2.0 | |
| Oracle VirtualBox | =3.2.2 | |
| Oracle VirtualBox | =3.2.4 | |
| Oracle VirtualBox | =3.2.6 | |
| Oracle VirtualBox | =3.2.8 | |
| Oracle VirtualBox | =3.2.10 | |
| Oracle VirtualBox | =3.2.12 | |
| Oracle VirtualBox | =3.2.14 | |
| Oracle VirtualBox | =3.2.16 | |
| Oracle VirtualBox | <=4.2.18 | |
| Oracle VirtualBox | =4.2.0 | |
| Oracle VirtualBox | =4.2.2 | |
| Oracle VirtualBox | =4.2.4 | |
| Oracle VirtualBox | =4.2.6 | |
| Oracle VirtualBox | =4.2.8 | |
| Oracle VirtualBox | =4.2.10 | |
| Oracle VirtualBox | =4.2.12 | |
| Oracle VirtualBox | =4.2.14 | |
| Oracle VirtualBox | =4.2.16 | |
| Oracle VirtualBox | <=4.0.20 | |
| Oracle VirtualBox | =4.0 | |
| Oracle VirtualBox | =4.0.0 | |
| Oracle VirtualBox | =4.0.2 | |
| Oracle VirtualBox | =4.0.4 | |
| Oracle VirtualBox | =4.0.6 | |
| Oracle VirtualBox | =4.0.8 | |
| Oracle VirtualBox | =4.0.10 | |
| Oracle VirtualBox | =4.0.12 | |
| Oracle VirtualBox | =4.0.14 | |
| Oracle VirtualBox | =4.0.16 | |
| Oracle VirtualBox | =4.0.18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/102060
- http://secunia.com/advisories/56490
- http://www.debian.org/security/2014/dsa-2878
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- http://www.securityfocus.com/bid/64758
- http://www.securityfocus.com/bid/64905
- http://www.securitytracker.com/id/1029610
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90371
Frequently Asked Questions
What is the severity of CVE-2014-0406?
CVE-2014-0406 is classified as a local vulnerability that may affect the integrity and availability of systems running affected versions of Oracle VM VirtualBox.
How do I fix CVE-2014-0406?
To mitigate CVE-2014-0406, upgrade Oracle VM VirtualBox to a version that is 3.2.20 or higher, or 4.0.22 or higher.
Which versions of Oracle VM VirtualBox are affected by CVE-2014-0406?
CVE-2014-0406 affects multiple versions of Oracle VM VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4.
What types of security issues does CVE-2014-0406 cause?
CVE-2014-0406 allows local users to affect system integrity and availability through unspecified vectors.
Is there a workaround for CVE-2014-0406?
No official workaround is provided for CVE-2014-0406; the best remediation is to update to the patched versions of Oracle VM VirtualBox.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle virtualbox
- version/oracle virtualbox/4.1.28
- version/oracle virtualbox/4.1.0
- version/oracle virtualbox/4.1.2
- version/oracle virtualbox/4.1.4
- version/oracle virtualbox/4.1.6
- version/oracle virtualbox/4.1.8
- version/oracle virtualbox/4.1.10
- version/oracle virtualbox/4.1.12
- version/oracle virtualbox/4.1.14
- version/oracle virtualbox/4.1.16
- version/oracle virtualbox/4.1.18
- version/oracle virtualbox/4.1.20
- version/oracle virtualbox/4.1.22
- version/oracle virtualbox/4.1.24
- version/oracle virtualbox/4.1.26
- version/oracle virtualbox/4.3.2
- version/oracle virtualbox/4.3.0
- version/oracle virtualbox/3.2.18
- version/oracle virtualbox/3.2.0
- version/oracle virtualbox/3.2.2
- version/oracle virtualbox/3.2.4
- version/oracle virtualbox/3.2.6
- version/oracle virtualbox/3.2.8
- version/oracle virtualbox/3.2.10
- version/oracle virtualbox/3.2.12
- version/oracle virtualbox/3.2.14
- version/oracle virtualbox/3.2.16
- version/oracle virtualbox/4.2.18
- version/oracle virtualbox/4.2.0
- version/oracle virtualbox/4.2.2
- version/oracle virtualbox/4.2.4
- version/oracle virtualbox/4.2.6
- version/oracle virtualbox/4.2.8
- version/oracle virtualbox/4.2.10
- version/oracle virtualbox/4.2.12
- version/oracle virtualbox/4.2.14
- version/oracle virtualbox/4.2.16
- version/oracle virtualbox/4.0.20
- version/oracle virtualbox/4.0
- version/oracle virtualbox/4.0.0
- version/oracle virtualbox/4.0.2
- version/oracle virtualbox/4.0.4
- version/oracle virtualbox/4.0.6
- version/oracle virtualbox/4.0.8
- version/oracle virtualbox/4.0.10
- version/oracle virtualbox/4.0.12
- version/oracle virtualbox/4.0.14
- version/oracle virtualbox/4.0.16
- version/oracle virtualbox/4.0.18