{"id":"CVE-2014-2488","aliases":["DLA-313-1","EUVD-2014-2524","GHSA-x6mp-mr6c-vfjv","UBUNTU-CVE-2014-2488"],"status":"published","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.","severity":{"version":"2.0","score":1,"vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00321,"percentile":0.25325,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-07-17T02:36:00Z","modified":"2026-06-17T00:06:41Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"virtualbox","fixed_in":["4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"virtualbox-ose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.28-dfsg-1+squeeze1"}]}],"versions":["3.2.10-dfsg-1","3.2.10-dfsg-1+squeeze1","3.2.10-dfsg-1+squeeze2","3.2.10-dfsg-1+squeeze3","3.2.10-dfsg-1+squeeze4","3.2.10-dfsg-2","3.2.12-dfsg-1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1"}]}],"versions":["4.2.16-dfsg-3","4.2.16-dfsg-3ubuntu1","4.3.2-dfsg-1","4.3.2-dfsg-1ubuntu1","4.3.2-dfsg-1ubuntu2","4.3.6-dfsg-1","4.3.6-dfsg-2","4.3.10-dfsg-1","4.3.10-dfsg-1ubuntu1","4.3.10-dfsg-1ubuntu2","4.3.10-dfsg-1ubuntu3","4.3.10-dfsg-1ubuntu4","4.3.10-dfsg-1ubuntu5"]}],"products":[{"vendor":"oracle","product":"vm_virtualbox"}],"references":[{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","report"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2488"},{"url":"https://github.com/advisories/GHSA-x6mp-mr6c-vfjv"},{"url":"https://ubuntu.com/security/CVE-2014-2488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2488","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-2488","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.","status":"published","published":"2014-07-17T02:36:00Z","modified":"2024-08-06T10:14:26.578Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-2524","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.","status":"published","published":"2014-07-17T02:36:00Z","modified":"2024-08-06T10:14:26Z","updated_at":"2026-11-03T01:57:14.00634Z"}],"ghsa":[{"id":"GHSA-x6mp-mr6c-vfjv","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.","status":"published","published":"2022-05-14T02:53:13Z","modified":"2023-02-02T05:06:30Z","updated_at":"2026-11-02T14:52:19.1406Z"}],"nvd":[{"id":"CVE-2014-2488","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.","status":"published","published":"2014-07-17T05:10:14.89Z","modified":"2026-06-17T00:06:41.96Z","cvss":[{"version":"2.0","score":1,"vector":"AV:L/AC:H/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:02:54.827864Z"}],"osv":[{"id":"DLA-313-1","title":"virtualbox-ose - security update","status":"published","published":"2015-09-21T00:00:00Z","modified":"2026-03-09T01:18:46.827378Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"UBUNTU-CVE-2014-2488","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.","status":"published","published":"2014-07-17T05:10:00Z","modified":"2025-09-08T16:43:09Z","updated_at":"2026-11-02T15:54:09.010095Z"}]}}