Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Virtualbox | — | Upgrade Oracle VirtualBox to the latest version | Jul 17, 2025 | Jan 17, 2013 |
| Suse | — | Upgrade virtualbox-guest-tools-debuginfoUpgrade virtualbox-guest-kmp-default-debuginfoUpgrade virtualbox-guest-kmp-desktopUpgrade virtualbox-qtUpgrade virtualbox-websrvUpgrade virtualbox-guest-kmp-defaultUpgrade virtualbox-guest-kmp-pae-debuginfoUpgrade virtualbox-debugsourceUpgrade virtualbox-qt-debuginfoUpgrade virtualboxUpgrade virtualbox-host-kmp-default-debuginfoUpgrade virtualbox-host-kmp-desktop-debuginfoUpgrade virtualbox-host-kmp-desktopUpgrade virtualbox-guest-x11-debuginfoUpgrade python-virtualboxUpgrade virtualbox-host-kmp-paeUpgrade virtualbox-host-kmp-defaultUpgrade virtualbox-host-kmp-pae-debuginfoUpgrade virtualbox-develUpgrade python-virtualbox-debuginfoUpgrade virtualbox-guest-kmp-desktop-debuginfoUpgrade virtualbox-guest-kmp-paeUpgrade virtualbox-guest-toolsUpgrade virtualbox-guest-x11Upgrade virtualbox-debuginfo | Dec 12, 2013 | Jan 16, 2013 |
| Ubuntu | — | Upgrade virtualbox | Nov 19, 2024 | Jan 17, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub