{"id":"CVE-2015-0427","aliases":["EUVD-2015-0440","GHSA-v98g-2jg8-r9w5","UBUNTU-CVE-2015-0427","openSUSE-SU-2024:10020-1"],"status":"published","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.","severity":{"version":"2.0","score":3.2,"vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0036,"percentile":0.29969,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-01-21T19:00:00Z","modified":"2026-06-17T00:20:14Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"virtualbox","fixed_in":["4.3.10-dfsg-1ubuntu2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.10-dfsg-1ubuntu2"}]}],"versions":["4.2.16-dfsg-3","4.2.16-dfsg-3ubuntu1","4.3.2-dfsg-1","4.3.2-dfsg-1ubuntu1","4.3.2-dfsg-1ubuntu2","4.3.6-dfsg-1","4.3.6-dfsg-2","4.3.10-dfsg-1","4.3.10-dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.10-2.5"}]}],"bundled":19}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"vm_virtualbox"}],"references":[{"url":"https://security.gentoo.org/glsa/201612-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","report"]},{"url":"http://www.securityfocus.com/bid/72216","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100181","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0427"},{"url":"https://github.com/advisories/GHSA-v98g-2jg8-r9w5"},{"url":"https://ubuntu.com/security/CVE-2015-0427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0427","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-561313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0427","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.","status":"published","published":"2015-01-21T19:00:00Z","modified":"2024-08-06T04:10:10.727Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0440","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.","status":"published","published":"2015-01-21T19:00:00Z","modified":"2024-08-06T04:10:10Z","updated_at":"2026-11-03T02:22:19.94462Z"}],"ghsa":[{"id":"GHSA-v98g-2jg8-r9w5","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.","status":"published","published":"2022-05-14T02:06:21Z","modified":"2023-02-02T05:05:08Z","updated_at":"2026-11-02T14:52:01.981409Z"}],"nvd":[{"id":"CVE-2015-0427","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.","status":"published","published":"2015-01-21T19:59:13.547Z","modified":"2026-06-17T00:20:14.603Z","cvss":[{"version":"2.0","score":3.2,"vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"openSUSE-SU-2024:10020-1","title":"python-virtualbox-5.1.10-2.5 on GA media","description":"These are all security issues fixed in the python-virtualbox-5.1.10-2.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:12:58.917626Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"UBUNTU-CVE-2015-0427","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.","status":"published","published":"2015-01-21T19:59:00Z","modified":"2025-09-08T16:43:18Z","updated_at":"2026-11-02T15:54:09.721803Z"}]}}