CVE-2015-0377: Medium severity oracle virtualbox vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.

Affected Software

62 affected components

Oracle VM VirtualBox=3.2.0

Oracle VM VirtualBox=3.2.2

Oracle VM VirtualBox=3.2.4

Oracle VM VirtualBox=3.2.6

Oracle VM VirtualBox=3.2.8

Oracle VM VirtualBox=3.2.10

Oracle VM VirtualBox=3.2.12

Oracle VM VirtualBox=3.2.14

Oracle VM VirtualBox=3.2.16

Oracle VM VirtualBox=3.2.18

Oracle VM VirtualBox=3.2.20

Oracle VM VirtualBox=3.2.22

Oracle VM VirtualBox=3.2.24

Oracle VM VirtualBox=4.0.0

Oracle VM VirtualBox=4.0.2

Oracle VM VirtualBox=4.0.4

Oracle VM VirtualBox=4.0.6

Oracle VM VirtualBox=4.0.8

Oracle VM VirtualBox=4.0.10

Oracle VM VirtualBox=4.0.12

Oracle VM VirtualBox=4.0.14

Oracle VM VirtualBox=4.0.16

Oracle VM VirtualBox=4.0.18

Oracle VM VirtualBox=4.0.20

Oracle VM VirtualBox=4.0.22

Oracle VM VirtualBox=4.0.24

Oracle VM VirtualBox=4.0.26

Oracle VM VirtualBox=4.1.0

Oracle VM VirtualBox=4.1.2

Oracle VM VirtualBox=4.1.4

Oracle VM VirtualBox=4.1.6

Oracle VM VirtualBox=4.1.8

Oracle VM VirtualBox=4.1.10

Oracle VM VirtualBox=4.1.12

Oracle VM VirtualBox=4.1.14

Oracle VM VirtualBox=4.1.16

Oracle VM VirtualBox=4.1.18

Oracle VM VirtualBox=4.1.20

Oracle VM VirtualBox=4.1.22

Oracle VM VirtualBox=4.1.24

Oracle VM VirtualBox=4.1.26

Oracle VM VirtualBox=4.1.28

Oracle VM VirtualBox=4.1.30

Oracle VM VirtualBox=4.1.32

Oracle VM VirtualBox=4.1.34

Oracle VM VirtualBox=4.2.0

Oracle VM VirtualBox=4.2.2

Oracle VM VirtualBox=4.2.4

Oracle VM VirtualBox=4.2.6

Oracle VM VirtualBox=4.2.8

Oracle VM VirtualBox=4.2.10

Oracle VM VirtualBox=4.2.12

Oracle VM VirtualBox=4.2.14

Oracle VM VirtualBox=4.2.16

Oracle VM VirtualBox=4.2.18

Oracle VM VirtualBox=4.2.20

Oracle VM VirtualBox=4.2.22

Oracle VM VirtualBox=4.2.24

Oracle VM VirtualBox=4.2.26

Debian Debian Linux=7.0

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0377?

The severity of CVE-2015-0377 is not explicitly defined, but it can affect the availability of the Oracle VM VirtualBox software.

How do I fix CVE-2015-0377?

To fix CVE-2015-0377, upgrade to Oracle VM VirtualBox version 3.2.26 or later, 4.0.28 or later, 4.1.36 or later, or 4.2.28 or later.

What versions of Oracle VM VirtualBox are affected by CVE-2015-0377?

CVE-2015-0377 affects Oracle VM VirtualBox versions prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28.

Can CVE-2015-0377 be exploited remotely?

CVE-2015-0377 is a local vulnerability and generally cannot be exploited remotely.

Who can be impacted by CVE-2015-0377?

Local users of vulnerable versions of Oracle VM VirtualBox can be impacted by CVE-2015-0377.