製品・ソフトウェアに関する情報

JVN脆弱性詳細

Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性

タイトル	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性
概要	Oracle Virtualization の Oracle VM VirtualBox には、Core に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。本脆弱性は、CVE-2015-0418 とは異なる脆弱性です。
想定される影響	ローカルユーザにより、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2015年1月20日0:00
登録日	2015年1月22日14:27
最終更新日	2015年1月22日14:27

CVSS2.0 : 警告
スコア	4.4
ベクター	AV:L/AC:M/Au:S/C:N/I:N/A:C

影響を受けるシステム

オラクル

Oracle VM VirtualBox 3.2.26 未満

Oracle VM VirtualBox 4.0.28 未満

Oracle VM VirtualBox 4.1.36 未満

Oracle VM VirtualBox 4.2.28 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-0377	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0377
National Vulnerability Database (NVD)
2	CVE-2015-0377	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0377

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	名前	URL
Oracle Critical Patch Update
1	Oracle Critical Patch Update Advisory - January 2015	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
2	Text Form of Oracle Critical Patch Update - January 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujan2015verbose-1972976.html
SECURITY BLOG
3	January 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/january_2015_critical_patch_update

変更履歴

No	変更内容	変更日
0	[2015年01月22日] 掲載	2018年2月17日10:37

NVD脆弱性情報

CVE-2015-0377

概要	Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.
公表日	2015年1月22日3:59
登録日	2021年1月26日14:44
最終更新日	2024年11月21日11:22

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:oracle:vm_virtualbox:4.0.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.10:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.10:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.28:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.34:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.26:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.10:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.26:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.26:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.32:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.30:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.10:::::::*

構成2		以上	以下	より上	未満
cpe:2.3:o:debian:debian_linux:7.0:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:o:opensuse:opensuse:13.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.2:::::::*

構成1	以上	以下	より上	未満
cpe:2.3:a:oracle:vm_virtualbox:4.0.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.10:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.10:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.28:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.34:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.22:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.26:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.10:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.26:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.26:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.2:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.8:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.32:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.24:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.30:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.16:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.1.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.0:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.6:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.18:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.14:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.4:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.0.12:::::::*
cpe:2.3:a:oracle:vm_virtualbox:3.2.20:::::::*
cpe:2.3:a:oracle:vm_virtualbox:4.2.10:::::::*

No	URL	タグ
1	http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
2	http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
3	http://secunia.com/advisories/62694
4	http://secunia.com/advisories/62694
5	http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf
6	http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf
7	http://www.debian.org/security/2015/dsa-3143
8	http://www.debian.org/security/2015/dsa-3143
9	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	Vendor Advisory
10	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	Vendor Advisory
11	http://www.securityfocus.com/bid/72219
12	http://www.securityfocus.com/bid/72219
13	https://exchange.xforce.ibmcloud.com/vulnerabilities/100176
14	https://exchange.xforce.ibmcloud.com/vulnerabilities/100176
15	https://security.gentoo.org/glsa/201612-27
16	https://security.gentoo.org/glsa/201612-27