Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

Matthew Daley discovered multiple vulnerabilities in VirtualBox, a x86 virtualisation solution, resulting in denial of service, privilege escalation and an information leak.

The remote host is affected by the vulnerability described in GLSA-201401-13 (VirtualBox: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Virtualbox. Please       review the CVE identifiers referenced below for details.
  Impact :

    A local attacker in a guest virtual machine may be able to escalate       privileges or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host contains a version of Oracle VM VirtualBox prior to 3.2.20 / 4.0.22 / 4.1.30 / 4.2.22 / 4.3.6.  It is, therefore, potentially affected by an unspecified, local security vulnerability related to a flaw in the 'Core' subcomponent.

Oracle reports :

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

ID	Name	Product	Family	Severity
72993	Debian DSA-2878-1 : virtualbox - security update	Nessus	Debian Local Security Checks	low
72052	GLSA-201401-13 : VirtualBox: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	low
72008	Oracle VM VirtualBox < 3.2.20 / 4.0.22 / 4.1.30 / 4.2.22 / 4.3.6 Local Vulnerability	Nessus	Windows	low
72002	FreeBSD : virtualbox-ose -- local vulnerability (81f1fdc2-7ec7-11e3-a6c6-00163e1ed244)	Nessus	FreeBSD Local Security Checks	low

Detections

Analytics

CVE-2013-5892

high

Tenable Plugins

low

low

low

low