Unscored severity · published Jan 21, 2015
CVE-2015-0418
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
7.0 · source: NVD
OP
Opensuse · Opensuse
13.1; 13.2 · source: NVD
VV
VM Virtualbox · Oracle
through 3.2.24; 3.2.0; 3.2.2; 3.2.4; 3.2.6; 3.2.8; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0418
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0418
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html
secunia.com
http://secunia.com/advisories/62694
www.debian.org
http://www.debian.org/security/2015/dsa-3143
Patch
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
www.securityfocus.com
http://www.securityfocus.com/bid/72194
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/100182
More from Debian Linux
10.0
CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder