{"id":"CVE-2016-3597","aliases":["EUVD-2016-4623","GHSA-49qm-9p7h-mwpv","MGASA-2016-0259"],"status":"published","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00388,"percentile":0.33187,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-07-21T10:00:00Z","modified":"2026-06-17T00:46:02Z","fixes":[{"ecosystem":"Mageia:5","package":"virtualbox","fixed_in":["5.1.2-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-virtualbox","fixed_in":["5.1.2-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kmod-vboxadditions","fixed_in":["5.1.2-1.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2-1.mga5"}]}]}],"products":[{"vendor":"oracle","product":"vm_virtualbox"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1036384","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/91864","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/91787","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3597"},{"url":"https://github.com/advisories/GHSA-49qm-9p7h-mwpv"},{"url":"https://advisories.mageia.org/MGASA-2016-0259.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18944","tags":["report"]},{"url":"https://www.virtualbox.org/wiki/Changelog","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-3597","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.","status":"published","published":"2016-07-21T10:00:00Z","modified":"2024-10-11T20:41:19.07Z","updated_at":"2026-11-02T14:33:33.758954Z"}],"euvd":[{"id":"EUVD-2016-4623","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.","status":"published","published":"2016-07-21T10:00:00Z","modified":"2024-10-11T20:41:19Z","updated_at":"2026-11-03T00:27:38.618953Z"}],"ghsa":[{"id":"GHSA-49qm-9p7h-mwpv","title":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.","status":"published","published":"2022-05-17T01:20:19Z","modified":"2023-02-03T05:03:53Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:53:26.852274Z"}],"nvd":[{"id":"CVE-2016-3597","description":"Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.","status":"published","published":"2016-07-21T10:14:37.347Z","modified":"2026-06-17T00:46:02.133Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:03:27.736698Z"}],"osv":[{"id":"MGASA-2016-0259","title":"Updated VirtualBox 5.1 packages fix security vulnerability","description":"This update provides the new VirtualBox 5.1 series, currently based\non 5.1.2 providing several perfomance enhancements\n\nThe highlights include:\n* VMM: new APIC and I/O APIC implementations that result in significantly\n  improved performance in certain situations (for example with networking)\n* VMM: activate the x2APIC by default for Linux guests\n* VMM: added support for Hyper-V paravirtualized debugging of Windows guests\n* VMM: emulate even more MMIO and shadow pagetable exits without going back\n  to user mode\n* GUI: overall migration to Qt5\n* GUI: passive API event listener improving the VM GUI performance and \n  response time\n* Audio: added HDA (High Definition Audio) support for newer Linux guests\n* Audio: added on-demand timers which should improve the overall performance\n  and reduce the CPU consumption\n* Audio: more fine-grained volume control for the AC'97 emulation, which now\n  also takes the master volume control into account\n* better support for Python 3 \n\nIt also resolves the following security issue:\n\nUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle\nVirtualization VirtualBox before 5.0.26 allows local users to affect\navailability via vectors related to Core (CVE-2016-3597). \n\nFor other fixes, see the referenced changelog.\n","status":"published","published":"2016-07-26T19:11:30Z","modified":"2026-04-16T06:23:34.057051491Z","updated_at":"2026-11-02T15:49:40.103088Z"}]}}