Lucene search

K
cve[email protected]CVE-2015-2594
HistoryJul 16, 2015 - 10:59 a.m.

CVE-2015-2594

2015-07-1610:59:20
web.nvd.nist.gov
91
oracle
virtualbox
vulnerability
local users
confidentiality
integrity
availability
nvd
cve-2015-2594

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

3 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.5%

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

Affected configurations

NVD
Node
oraclevm_virtualboxRange4.0.04.0.32
OR
oraclevm_virtualboxRange4.1.04.1.40
OR
oraclevm_virtualboxRange4.2.04.2.32
OR
oraclevm_virtualboxRange4.3.04.3.30
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

3 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.5%