Unscored severity · published Jan 21, 2015
CVE-2014-6589
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
13.1; 13.2 · source: NVD
VV
VM Virtualbox · Oracle
through 4.3.18 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6589
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6589
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
security.gentoo.org
https://security.gentoo.org/glsa/201612-27
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability