CVE-2015-4896: Medium severity oracle virtualbox vulnerability

Q: What is the severity of CVE-2015-4896?

CVE-2015-4896 is considered a high severity vulnerability that affects availability when the Remote Display feature is enabled on Oracle VM VirtualBox.

Q: How do I fix CVE-2015-4896?

To fix CVE-2015-4896, upgrade Oracle VM VirtualBox to version 4.0.34 or later for versions 4.0.x to 5.0.x.

Q: Which versions of Oracle VM VirtualBox are affected by CVE-2015-4896?

CVE-2015-4896 affects Oracle VM VirtualBox versions prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8.

Q: Does CVE-2015-4896 affect Debian Linux systems?

Yes, CVE-2015-4896 affects Debian Linux systems running Oracle VM VirtualBox before the specified patched versions.

Q: What component is impacted by CVE-2015-4896?

CVE-2015-4896 impacts the Oracle VM VirtualBox component, specifically related to its Remote Display feature.

Published Oct 21, 2015

Updated

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.

Affected Software

8 affected components

Oracle VM VirtualBox>=4.0.0<4.0.34

Oracle VM VirtualBox>=4.1.0<4.1.42

Oracle VM VirtualBox>=4.2.0<4.2.34

Oracle VM VirtualBox>=4.3.0<4.3.32

Oracle VM VirtualBox>=5.0.0<5.0.8

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Event History

Oct 21, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4896?

CVE-2015-4896 is considered a high severity vulnerability that affects availability when the Remote Display feature is enabled on Oracle VM VirtualBox.

How do I fix CVE-2015-4896?