CVEvulnerability
CVE-2017-3513
2.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2017-04-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 2.5 LOW — CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Description
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N).
Affected configurations
• oracle vm virtualbox (>= 5.0.0 <= 5.0.36)
• oracle vm virtualbox (>= 5.1.0 <= 5.1.18)
References
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/97736 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038288 Third Party Advisory, VDB Entry
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/97736 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038288 Third Party Advisory, VDB Entry