NVD Vulnerability Detail

CVE-2015-4813

Summary	Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.
Publication Date	Oct. 22, 2015, 6:59 a.m.
Registration Date	Jan. 26, 2021, 2:51 p.m.
Last Update	Nov. 21, 2024, 11:31 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-updates/2015-11/msg00000.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-updates/2015-11/msg00000.html	Mailing List Third Party Advisory
3	http://lists.opensuse.org/opensuse-updates/2015-11/msg00172.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-updates/2015-11/msg00172.html	Mailing List Third Party Advisory
5	http://www.debian.org/security/2015/dsa-3384	Third Party Advisory
6	http://www.debian.org/security/2015/dsa-3384	Third Party Advisory
7	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	Vendor Advisory
8	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	Vendor Advisory
9	http://www.securityfocus.com/bid/77185	Third Party Advisory VDB Entry
10	http://www.securityfocus.com/bid/77185	Third Party Advisory VDB Entry
11	http://www.securitytracker.com/id/1033880	Third Party Advisory VDB Entry
12	http://www.securitytracker.com/id/1033880	Third Party Advisory VDB Entry

Common Vulnerabilities List

JVN Vulnerability Information

Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性

Title	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性
Summary	Oracle Virtualization の Oracle VM VirtualBox には、Windows ゲストを使用する場合、Core に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。
Possible impacts	ローカルユーザにより、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 20, 2015, midnight
Registration Date	Oct. 23, 2015, 10:16 a.m.
Last Update	Oct. 23, 2015, 10:16 a.m.

Affected System

オラクル

Oracle VM VirtualBox 4.0.34 未満

Oracle VM VirtualBox 4.1.42 未満

Oracle VM VirtualBox 4.2.34 未満

Oracle VM VirtualBox 4.3.32 未満

Oracle VM VirtualBox 5.0.8 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-4813	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4813
National Vulnerability Database (NVD)
2	CVE-2015-4813	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4813

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Oracle Critical Patch Update
1	Oracle Critical Patch Update Advisory - October 2015	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
2	Text Form of Oracle Critical Patch Update - October 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuoct2015verbose-2367954.html
SECURITY BLOG
3	October 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2015_critical_patch_update

Change Log

No	Changed Details	Date of change
0	[2015年10月23日] 掲載	Feb. 17, 2018, 10:37 a.m.