Unscored severity · published Oct 17, 2012
CVE-2012-3221
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Virtualization · Oracle
3.2; 4.0; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3221
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3221
www.debian.org
http://www.debian.org/security/2012/dsa-2594
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
www.securityfocus.com
http://www.securityfocus.com/bid/56045
www.securitytracker.com
http://www.securitytracker.com/id?1027666
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/79380
More from Virtualization
5.5
CVE-2021-20191
A flaw was found in ansible
5.3
CVE-2020-10775
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing…
–
CVE-2015-2581
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via…
–
CVE-2014-0230
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire…
–
CVE-2014-6459
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to…