{"id":"CVE-2014-6540","aliases":["DEBIAN-CVE-2014-6540","EUVD-2014-6419","GHSA-8w9x-37pw-9xcr","UBUNTU-CVE-2014-6540"],"status":"published","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00381,"percentile":0.32368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-10-15T22:03:00Z","modified":"2026-10-23T15:47:27Z","fixes":[{"ecosystem":"Debian:12","package":"virtualbox-guest-additions-iso","fixed_in":["4.3.14-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"virtualbox-guest-additions-iso","fixed_in":["4.3.14-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"virtualbox-guest-additions-iso","fixed_in":["4.3.14-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"virtualbox","fixed_in":["4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"virtualbox-guest-additions-iso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-1"}]}],"versions":["4.0.10-1","4.0.8-1","4.1.0-1","4.1.10-1","4.1.12-1","4.1.14-1","4.1.16-1","4.1.18-1","4.1.2-1","4.1.4-1","4.1.6-1","4.1.8-1","4.2.10-1","4.2.10-2","4.2.10-2~bpo70+1","4.2.16-1","4.2.16-1~bpo70+1","4.2.8-1","4.3.10-1","4.3.10-1~bpo70+1","4.3.12-1","4.3.12-1~bpo70+1","4.3.14-1~bpo70+1","4.3.2-1","4.3.6-1","4.3.8-1","4.3.8-1~bpo70+1"]},{"source":"osv","ecosystem":"Debian:13","package":"virtualbox-guest-additions-iso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-1"}]}],"versions":["4.0.10-1","4.0.8-1","4.1.0-1","4.1.10-1","4.1.12-1","4.1.14-1","4.1.16-1","4.1.18-1","4.1.2-1","4.1.4-1","4.1.6-1","4.1.8-1","4.2.10-1","4.2.10-2","4.2.10-2~bpo70+1","4.2.16-1","4.2.16-1~bpo70+1","4.2.8-1","4.3.10-1","4.3.10-1~bpo70+1","4.3.12-1","4.3.12-1~bpo70+1","4.3.14-1~bpo70+1","4.3.2-1","4.3.6-1","4.3.8-1","4.3.8-1~bpo70+1"]},{"source":"osv","ecosystem":"Debian:14","package":"virtualbox-guest-additions-iso","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-1"}]}],"versions":["4.0.10-1","4.0.8-1","4.1.0-1","4.1.10-1","4.1.12-1","4.1.14-1","4.1.16-1","4.1.18-1","4.1.2-1","4.1.4-1","4.1.6-1","4.1.8-1","4.2.10-1","4.2.10-2","4.2.10-2~bpo70+1","4.2.16-1","4.2.16-1~bpo70+1","4.2.8-1","4.3.10-1","4.3.10-1~bpo70+1","4.3.12-1","4.3.12-1~bpo70+1","4.3.14-1~bpo70+1","4.3.2-1","4.3.6-1","4.3.8-1","4.3.8-1~bpo70+1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1"}]}],"versions":["4.2.16-dfsg-3","4.2.16-dfsg-3ubuntu1","4.3.2-dfsg-1","4.3.2-dfsg-1ubuntu1","4.3.2-dfsg-1ubuntu2","4.3.6-dfsg-1","4.3.6-dfsg-2","4.3.10-dfsg-1","4.3.10-dfsg-1ubuntu1","4.3.10-dfsg-1ubuntu2","4.3.10-dfsg-1ubuntu3","4.3.10-dfsg-1ubuntu4","4.3.10-dfsg-1ubuntu5"]}],"products":[{"vendor":"oracle","product":"vm_virtualbox"}],"references":[{"url":"http://secunia.com/advisories/61582","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"http://www.securityfocus.com/bid/70493","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1031034","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6540"},{"url":"https://github.com/advisories/GHSA-8w9x-37pw-9xcr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-6540","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-6540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6540","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-6540","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2014-10-15T22:03:00Z","modified":"2024-08-06T12:17:24.377Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-6419","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2014-10-15T22:03:00Z","modified":"2024-08-06T12:17:24Z","updated_at":"2026-11-03T01:56:58.553318Z"}],"ghsa":[{"id":"GHSA-8w9x-37pw-9xcr","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2022-05-17T04:21:13Z","modified":"2023-01-28T05:01:36Z","updated_at":"2026-11-02T14:43:35.577766Z"}],"nvd":[{"id":"CVE-2014-6540","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2014-10-15T22:55:07.67Z","modified":"2026-06-17T00:13:18.877Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:02:56.601372Z"}],"osv":[{"id":"CVE-2014-6540","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2014-10-15T22:55:07Z","modified":"2026-04-10T03:44:00.029303Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-6540","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2014-10-15T22:55:07.67Z","modified":"2026-10-23T15:47:27.503801666Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"UBUNTU-CVE-2014-6540","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.","status":"published","published":"2014-10-15T22:55:00Z","modified":"2025-09-08T16:43:13Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}