{"id":"CVE-2015-0377","aliases":["DLA-268-1","DSA-3143-1","EUVD-2015-0390","GHSA-3gv9-pq9v-v26v","openSUSE-SU-2024:10020-1"],"status":"published","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.","severity":{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00324,"percentile":0.25632,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2015-01-21T18:00:00Z","modified":"2026-06-17T00:20:08Z","affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"virtualbox-ose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.10-dfsg-1+squeeze4"}]}],"versions":["3.2.10-dfsg-1","3.2.10-dfsg-1+squeeze1","3.2.10-dfsg-1+squeeze2","3.2.10-dfsg-1+squeeze3"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.18-dfsg-2+deb7u4"}]}],"versions":["4.1.18-dfsg-2+deb7u1","4.1.18-dfsg-2+deb7u2","4.1.18-dfsg-2+deb7u3","4.1.18-dfsg-2+deb7u3~bpo60+1","4.1.18-dfsg-2+deb7u4~bpo60+1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.10-2.5"}]}],"bundled":19}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"vm_virtualbox"}],"references":[{"url":"https://security.gentoo.org/glsa/201612-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://secunia.com/advisories/62694","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/72219","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.debian.org/security/2015/dsa-3143","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100176","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0377"},{"url":"https://github.com/advisories/GHSA-3gv9-pq9v-v26v"},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-561313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0377","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.","status":"published","published":"2015-01-21T18:00:00Z","modified":"2024-08-06T04:10:09.548Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0390","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.","status":"published","published":"2015-01-21T18:00:00Z","modified":"2024-08-06T04:10:09Z","updated_at":"2026-11-03T02:22:19.94462Z"}],"ghsa":[{"id":"GHSA-3gv9-pq9v-v26v","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.","status":"published","published":"2022-05-14T02:06:21Z","modified":"2023-02-02T05:05:07Z","updated_at":"2026-11-02T14:52:01.981409Z"}],"nvd":[{"id":"CVE-2015-0377","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.","status":"published","published":"2015-01-21T18:59:23.687Z","modified":"2026-06-17T00:20:08.343Z","cvss":[{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"DLA-268-1","title":"virtualbox-ose - security update","status":"published","published":"2015-07-05T00:00:00Z","modified":"2026-03-09T01:21:18.462506Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-3143-1","title":"virtualbox - security update","status":"published","published":"2015-01-28T00:00:00Z","modified":"2026-03-09T01:22:49.712748Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"openSUSE-SU-2024:10020-1","title":"python-virtualbox-5.1.10-2.5 on GA media","description":"These are all security issues fixed in the python-virtualbox-5.1.10-2.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:12:58.917626Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}