{"id":"CVE-2018-3292","aliases":["EUVD-2018-15146","GHSA-9q3q-cp86-93v4","MGASA-2018-0437","UBUNTU-CVE-2018-3292","openSUSE-SU-2019:1814-1"],"status":"published","title":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...","description":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).","severity":{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00722,"percentile":0.54239,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-10-17T01:00:00Z","modified":"2026-06-17T01:57:25Z","affected":[{"source":"osv","ecosystem":"Mageia:6","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Mageia:6","package":"kmod-vboxadditions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.20-1.mga6"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.4-dfsg-2","5.0.8-dfsg-1","5.0.10-dfsg-1","5.0.10-dfsg-2","5.0.10-dfsg-3","5.0.10-dfsg-4","5.0.10-dfsg-5","5.0.10-dfsg-6","5.0.10-dfsg-7","5.0.12-dfsg-1","5.0.12-dfsg-2","5.0.14-dfsg-1","5.0.14-dfsg-2","5.0.14-dfsg-2build1","5.0.16-dfsg-2","5.0.16-dfsg-3","5.0.18-dfsg-1","5.0.18-dfsg-1ubuntu1","5.0.18-dfsg-2","5.0.18-dfsg-2build1","5.0.18-dfsg-2ubuntu1","5.0.24-dfsg-0ubuntu1.16.04.1","5.0.32-dfsg-0ubuntu1.16.04.2","5.0.36-dfsg-0ubuntu1.16.04.2","5.0.40-dfsg-0ubuntu1.16.04.1","5.0.40-dfsg-0ubuntu1.16.04.2","5.1.34-dfsg-0ubuntu1.16.04.2","5.1.38-dfsg-0ubuntu1.16.04.1","5.1.38-dfsg-0ubuntu1.16.04.2","5.1.38-dfsg-0ubuntu1.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.30-dfsg-1","5.2.0-dfsg-1build2","5.2.0-dfsg-2","5.2.0-dfsg-4","5.2.0-dfsg-5","5.2.2-dfsg-2","5.2.2-dfsg-3~build1","5.2.2-dfsg-3","5.2.4-dfsg-1","5.2.4-dfsg-2","5.2.6-dfsg-1","5.2.6-dfsg-2","5.2.6-dfsg-3","5.2.6-dfsg-3build1","5.2.6-dfsg-5","5.2.8-dfsg-2","5.2.8-dfsg-3","5.2.8-dfsg-5","5.2.8-dfsg-6","5.2.8-dfsg-7","5.2.10-dfsg-1","5.2.10-dfsg-2","5.2.10-dfsg-5","5.2.10-dfsg-6","5.2.10-dfsg-6ubuntu18.04.1","5.2.18-dfsg-2~ubuntu18.04.1","5.2.18-dfsg-2~ubuntu18.04.3","5.2.18-dfsg-2~ubuntu18.04.5","5.2.32-dfsg-0~ubuntu18.04.1","5.2.34-dfsg-0~ubuntu18.04.1","5.2.42-dfsg-0~ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-lp151.2.6.1"}]}],"bundled":52},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.10-lp151.2.6.1"}]}],"bundled":52}],"products":[{"vendor":"oracle","product":"vm_virtualbox"},{"vendor":"oracle corporation","product":"vm virtualbox"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","report"]},{"url":"http://www.securitytracker.com/id/1041887","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","report"]},{"url":"http://www.securityfocus.com/bid/105619","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3292"},{"url":"https://github.com/advisories/GHSA-9q3q-cp86-93v4"},{"url":"https://advisories.mageia.org/MGASA-2018-0437.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23719","tags":["report"]},{"url":"https://www.virtualbox.org/wiki/Changelog#20","tags":["web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html#AppendixOVIR","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-3292","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-3292","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN/#RTRWENR4KO4H3XNPBQUVKRGCPIDNAWUN","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1097248","tags":["report"]},{"url":"https://bugzilla.suse.com/1098050","tags":["report"]},{"url":"https://bugzilla.suse.com/1112097","tags":["report"]},{"url":"https://bugzilla.suse.com/1113894","tags":["report"]},{"url":"https://bugzilla.suse.com/1115041","tags":["report"]},{"url":"https://bugzilla.suse.com/1116050","tags":["report"]},{"url":"https://bugzilla.suse.com/1130503","tags":["report"]},{"url":"https://bugzilla.suse.com/1130588","tags":["report"]},{"url":"https://bugzilla.suse.com/1132379","tags":["report"]},{"url":"https://bugzilla.suse.com/1132439","tags":["report"]},{"url":"https://bugzilla.suse.com/1132827","tags":["report"]},{"url":"https://bugzilla.suse.com/1133289","tags":["report"]},{"url":"https://bugzilla.suse.com/1133492","tags":["report"]},{"url":"https://bugzilla.suse.com/1141801","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2877","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-3292","description":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).","status":"published","published":"2018-10-17T01:00:00Z","modified":"2024-10-02T19:19:40.408Z","updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15146","description":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).","status":"published","published":"2018-10-17T01:00:00Z","modified":"2024-10-02T19:19:40Z","updated_at":"2026-11-03T00:27:57.212945Z"}],"ghsa":[{"id":"GHSA-9q3q-cp86-93v4","title":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...","description":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).","status":"published","published":"2022-05-13T01:52:30Z","modified":"2023-02-02T05:02:05Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:21.252342Z"}],"nvd":[{"id":"CVE-2018-3292","description":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).","status":"published","published":"2018-10-17T01:31:30.167Z","modified":"2026-06-17T01:57:25.37Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:46.409324Z"}],"osv":[{"id":"UBUNTU-CVE-2018-3292","description":"Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).","status":"published","published":"2018-10-17T01:31:00Z","modified":"2025-10-24T04:46:47Z","cvss":[{"version":"3.0","score":8.6,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"MGASA-2018-0437","title":"Updated virtualbox packages fix security vulnerabilities","description":"This update provides virtualbox 5.2.20 and fixes the following security\nvulnerabilities:\n\nDuring key agreement in a TLS handshake using a DH(E) based ciphersuite\na malicious server can send a very large prime value to the client. This\nwill cause the client to spend an unreasonably long period of time\ngenerating a key for this prime resulting in a hang until the client has\nfinished. This could be exploited in a Denial Of Service attack\n(CVE-2018-0732).\n\nVulnerability in VirtualBox contains an easily exploitable vulnerability\nthat allows unauthenticated attacker with logon to the infrastructure\nwhere VirtualBox executes to compromise VirtualBox. Successful attacks\nrequire human interaction from a person other than the attacker and while\nthe vulnerability is in VirtualBox, attacks may significantly impact\nadditional products. Successful attacks of this vulnerability can result\nin takeover of VirtualBox (CVE-2018-2909, CVE-2018-3287, (CVE-2018-3288,\nCVE-2018-3289, CVE-2018-3290, CVE-2018-3291, CVE-2018-3292, CVE-2018-3293,\nCVE-2018-3295, CVE-2018-3296, CVE-2018-3297, CVE-2018-3298).\n\nVulnerability in VirtualBox contains an easily exploitable vulnerability\nthat allows unauthenticated attacker with llow privileged attacker with\nnetwork access via VRDP to compromise VirtualBox. Successful attacks\nrequire human interaction from a person other than the attacker and while\nthe vulnerability is in VirtualBox, attacks may significantly impact\nadditional products. Successful attacks of this vulnerability can result\nin takeover of VirtualBox (CVE-2018-3294).\n\nFor other fixes in this update, see the referenced changelog.\n","status":"published","published":"2018-11-03T11:55:18Z","modified":"2026-04-16T06:23:57.889277104Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1814-1","title":"Security update for virtualbox","description":"This update for virtualbox to version 6.0.10 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543\n  CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875\n  CVE-2019-2876 CVE-2019-2850 (boo#1141801)\n","status":"published","published":"2019-07-30T07:38:06Z","modified":"2026-02-04T04:18:12.409785Z","updated_at":"2026-11-02T16:58:30.784344Z"}]}}