CVE-2015-2594: Medium severity oracle virtualbox vulnerability

Q: What is the severity of CVE-2015-2594?

CVE-2015-2594 is classified as a medium severity vulnerability affecting confidentiality, integrity, and availability.

Q: How do I fix CVE-2015-2594?

To mitigate CVE-2015-2594, upgrade Oracle VM VirtualBox to versions 4.0.32, 4.1.40, 4.2.32, or 4.3.30 or later.

Q: What versions of Oracle VM VirtualBox are affected by CVE-2015-2594?

CVE-2015-2594 affects Oracle VM VirtualBox versions prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30.

Q: Can CVE-2015-2594 be exploited remotely?

CVE-2015-2594 is a local vulnerability, meaning exploitation requires local access to the system.

Q: Is there a workaround for CVE-2015-2594?

There are no known workarounds for CVE-2015-2594; the only mitigation is to update to a patched version.

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

Affected Software

7 affected components

Oracle VM VirtualBox>=4.0.0<4.0.32

Oracle VM VirtualBox>=4.1.0<4.1.40

Oracle VM VirtualBox>=4.2.0<4.2.32

Oracle VM VirtualBox>=4.3.0<4.3.30

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2594?

CVE-2015-2594 is classified as a medium severity vulnerability affecting confidentiality, integrity, and availability.

How do I fix CVE-2015-2594?