CVE-2014-6540: Low severity oracle virtualbox vulnerability
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What versions of Oracle VM VirtualBox are affected by CVE-2014-6540?
CVE-2014-6540 affects Oracle VM VirtualBox versions before 4.1.34, 4.2.26, and 4.3.14.
What is the nature of the vulnerability in CVE-2014-6540?
The vulnerability in CVE-2014-6540 allows local users to impact availability related to the graphics driver (WDDM) for Windows guests.
How can I mitigate CVE-2014-6540?
To mitigate CVE-2014-6540, update Oracle VM VirtualBox to a version that is 4.1.34 or later, 4.2.26 or later, or 4.3.14 or later.
Is CVE-2014-6540 a remote or local vulnerability?
CVE-2014-6540 is classified as a local vulnerability affecting users who have access to the affected VirtualBox environment.
What should I do if I am unable to update Oracle VM VirtualBox to fix CVE-2014-6540?
If you cannot update, consider isolating the affected systems and restricting user access until a patch can be applied.