CVE-2014-6595: Low severity opensuse vulnerability

Q: What is the severity of CVE-2014-6595?

CVE-2014-6595 is rated as a medium severity vulnerability due to the potential impact on integrity and availability.

Q: How do I fix CVE-2014-6595?

To fix CVE-2014-6595, users should upgrade to Oracle VM VirtualBox version 4.3.20 or later.

Q: Which versions of Oracle VM VirtualBox are affected by CVE-2014-6595?

CVE-2014-6595 affects Oracle VM VirtualBox versions prior to 4.3.20.

Q: Are there any specific operating systems affected by CVE-2014-6595?

Yes, openSUSE versions 13.1 and 13.2 are also affected by CVE-2014-6595.

Q: What type of attack vector does CVE-2014-6595 involve?

CVE-2014-6595 involves local user access affecting integrity and availability through the VMSVGA virtual graphics device.

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427.

Affected Software

3 affected components

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Oracle VM VirtualBox<=4.3.18

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6595?

CVE-2014-6595 is rated as a medium severity vulnerability due to the potential impact on integrity and availability.

How do I fix CVE-2014-6595?

To fix CVE-2014-6595, users should upgrade to Oracle VM VirtualBox version 4.3.20 or later.

Which versions of Oracle VM VirtualBox are affected by CVE-2014-6595?

CVE-2014-6595 affects Oracle VM VirtualBox versions prior to 4.3.20.

Are there any specific operating systems affected by CVE-2014-6595?

Yes, openSUSE versions 13.1 and 13.2 are also affected by CVE-2014-6595.

What type of attack vector does CVE-2014-6595 involve?