ID CVE-2013-3792
Summary Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0.20, 4.1.28, and 4.2.18 allows local users to affect availability via unknown vectors related to Core.
References
Vulnerable Configurations
  • Oracle VM VirtualBox 4.2.6
    cpe:2.3:a:oracle:vm_virtualbox:4.2.6
  • Oracle VM VirtualBox 4.2.8
    cpe:2.3:a:oracle:vm_virtualbox:4.2.8
  • Oracle VM VirtualBox 4.2.10
    cpe:2.3:a:oracle:vm_virtualbox:4.2.10
  • Oracle VM VirtualBox 4.2.12
    cpe:2.3:a:oracle:vm_virtualbox:4.2.12
  • Oracle VM VirtualBox 4.2.14
    cpe:2.3:a:oracle:vm_virtualbox:4.2.14
  • Oracle VM VirtualBox 4.2.16
    cpe:2.3:a:oracle:vm_virtualbox:4.2.16
  • Oracle VM VirtualBox 4.2.0
    cpe:2.3:a:oracle:vm_virtualbox:4.2.0
  • Oracle VM VirtualBox 4.2.2
    cpe:2.3:a:oracle:vm_virtualbox:4.2.2
  • Oracle VM VirtualBox 4.2.4
    cpe:2.3:a:oracle:vm_virtualbox:4.2.4
  • Oracle VM VirtualBox 3.2.16
    cpe:2.3:a:oracle:vm_virtualbox:3.2.16
  • Oracle VM VirtualBox 3.0
    cpe:2.3:a:oracle:vm_virtualbox:3.0
  • Oracle VM VirtualBox 3.0.0
    cpe:2.3:a:oracle:vm_virtualbox:3.0.0
  • Oracle VM VirtualBox 3.0.10
    cpe:2.3:a:oracle:vm_virtualbox:3.0.10
  • Oracle VM VirtualBox 3.0.12
    cpe:2.3:a:oracle:vm_virtualbox:3.0.12
  • Oracle VM VirtualBox 3.0.14
    cpe:2.3:a:oracle:vm_virtualbox:3.0.14
  • Oracle VM VirtualBox 3.0.2
    cpe:2.3:a:oracle:vm_virtualbox:3.0.2
  • Oracle VM VirtualBox 3.0.4
    cpe:2.3:a:oracle:vm_virtualbox:3.0.4
  • Oracle VM VirtualBox 3.0.6
    cpe:2.3:a:oracle:vm_virtualbox:3.0.6
  • Oracle VM VirtualBox 3.0.8
    cpe:2.3:a:oracle:vm_virtualbox:3.0.8
  • Oracle VM VirtualBox 3.1
    cpe:2.3:a:oracle:vm_virtualbox:3.1
  • Oracle VM VirtualBox 3.1.0
    cpe:2.3:a:oracle:vm_virtualbox:3.1.0
  • Oracle VM VirtualBox 3.1.2
    cpe:2.3:a:oracle:vm_virtualbox:3.1.2
  • Oracle VM VirtualBox 3.1.4
    cpe:2.3:a:oracle:vm_virtualbox:3.1.4
  • Oracle VM VirtualBox 3.1.6
    cpe:2.3:a:oracle:vm_virtualbox:3.1.6
  • Oracle VM VirtualBox 3.1.8
    cpe:2.3:a:oracle:vm_virtualbox:3.1.8
  • Oracle VM VirtualBox 3.2
    cpe:2.3:a:oracle:vm_virtualbox:3.2
  • Oracle VM VirtualBox 3.2.0
    cpe:2.3:a:oracle:vm_virtualbox:3.2.0
  • Oracle VM VirtualBox 3.2.10
    cpe:2.3:a:oracle:vm_virtualbox:3.2.10
  • Oracle VM VirtualBox 3.2.12
    cpe:2.3:a:oracle:vm_virtualbox:3.2.12
  • Oracle VM VirtualBox 3.2.14
    cpe:2.3:a:oracle:vm_virtualbox:3.2.14
  • Oracle VM VirtualBox 3.2.2
    cpe:2.3:a:oracle:vm_virtualbox:3.2.2
  • Oracle VM VirtualBox 3.2.4
    cpe:2.3:a:oracle:vm_virtualbox:3.2.4
  • Oracle VM VirtualBox 3.2.6
    cpe:2.3:a:oracle:vm_virtualbox:3.2.6
  • Oracle VM VirtualBox 3.2.8
    cpe:2.3:a:oracle:vm_virtualbox:3.2.8
  • Oracle VM VirtualBox 4.1.26
    cpe:2.3:a:oracle:vm_virtualbox:4.1.26
  • Oracle VM VirtualBox 4.1.24
    cpe:2.3:a:oracle:vm_virtualbox:4.1.24
  • Oracle VM VirtualBox 4.1.0
    cpe:2.3:a:oracle:vm_virtualbox:4.1.0
  • Oracle VM VirtualBox 4.1.10
    cpe:2.3:a:oracle:vm_virtualbox:4.1.10
  • Oracle VM VirtualBox 4.1.12
    cpe:2.3:a:oracle:vm_virtualbox:4.1.12
  • Oracle VM VirtualBox 4.1.14
    cpe:2.3:a:oracle:vm_virtualbox:4.1.14
  • Oracle VM VirtualBox 4.1.16
    cpe:2.3:a:oracle:vm_virtualbox:4.1.16
  • Oracle VM VirtualBox 4.1.18
    cpe:2.3:a:oracle:vm_virtualbox:4.1.18
  • Oracle VM VirtualBox 4.1.2
    cpe:2.3:a:oracle:vm_virtualbox:4.1.2
  • Oracle VM VirtualBox 4.1.20
    cpe:2.3:a:oracle:vm_virtualbox:4.1.20
  • Oracle VM VirtualBox 4.1.22
    cpe:2.3:a:oracle:vm_virtualbox:4.1.22
  • Oracle Vm Virtualbox 4.1.4
    cpe:2.3:a:oracle:vm_virtualbox:4.1.4
  • Oracle VM VirtualBox 4.1.6
    cpe:2.3:a:oracle:vm_virtualbox:4.1.6
  • Oracle VM VirtualBox 4.1.8
    cpe:2.3:a:oracle:vm_virtualbox:4.1.8
  • Oracle VM VirtualBox 4.0.18
    cpe:2.3:a:oracle:vm_virtualbox:4.0.18
  • Oracle VM VirtualBox 4.0
    cpe:2.3:a:oracle:vm_virtualbox:4.0
  • Oracle VM VirtualBox 4.0.0
    cpe:2.3:a:oracle:vm_virtualbox:4.0.0
  • Oracle VM VirtualBox 4.0.10
    cpe:2.3:a:oracle:vm_virtualbox:4.0.10
  • Oracle VM VirtualBox 4.0.12
    cpe:2.3:a:oracle:vm_virtualbox:4.0.12
  • Oracle VM VirtualBox 4.0.14
    cpe:2.3:a:oracle:vm_virtualbox:4.0.14
  • Oracle VM VirtualBox 4.0.16
    cpe:2.3:a:oracle:vm_virtualbox:4.0.16
  • Oracle VM VirtualBox 4.0.2
    cpe:2.3:a:oracle:vm_virtualbox:4.0.2
  • Oracle VM VirtualBox 4.0.4
    cpe:2.3:a:oracle:vm_virtualbox:4.0.4
  • Oracle VM VirtualBox 4.0.6
    cpe:2.3:a:oracle:vm_virtualbox:4.0.6
  • Oracle VM VirtualBox 4.0.8
    cpe:2.3:a:oracle:vm_virtualbox:4.0.8
CVSS
Base: 3.8 (as of 16-10-2013 - 12:55)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
LOCAL HIGH SINGLE_INSTANCE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
exploit-db via4
description Oracle VM VirtualBox 4.0 'tracepath' Local Denial of Service Vulnerability. CVE-2013-3792. Dos exploits for multiple platform
id EDB-ID:38595
last seen 2016-02-04
modified 2013-06-26
published 2013-06-26
reporter Thomas Dreibholz
source https://www.exploit-db.com/download/38595/
title Oracle VM VirtualBox <= 4.0 'tracepath' Local Denial of Service Vulnerability
nessus via4
  • NASL family Windows
    NASL id VIRTUALBOX_4_2_16.NASL
    description The remote host contains a version of Oracle VM VirtualBox earlier than 3.2.18 / 4.0.20 / 4.1.28 / 4.2.18. As such, it is potentially affected by a local denial of service vulnerability when handling a tracepath.
    last seen 2019-02-21
    modified 2018-11-15
    plugin id 68984
    published 2013-07-20
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=68984
    title Oracle VM VirtualBox < 3.2.18 / 4.0.20 / 4.1.28 / 4.2.18 Local DoS
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-313.NASL
    description The latest maintenance release of the VirtualBox (OSE) 3.2.x series (i.e., version 3.2.28) has been uploaded to Debian LTS (squeeze). Thanks to Gianfranco Costamagna for preparing packages for review and upload by the Debian LTS Team. Unfortunately, Oracle no longer provides information on specific security vulnerabilities in VirtualBox, thus we provide their latest 3.2.28 maintenance release in Debian LTS (squeeze) directly. CVE-2013-3792 Oracle reported an unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0.20, 4.1.28, and 4.2.18 allows local users to affect availability via unknown vectors related to Core. The fix for CVE-2013-3792 prevents a virtio-net host DoS vulnerability by adding large frame support to IntNet, VirtioNet and NetFilter plus dropping oversized frames. CVE-2014-2486 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core. No further details have been provided, the attack range has been given as local, severity low. CVE-2014-2488 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core. No further details can been provided, the attack range has been given as local, severity low. CVE-2014-2489 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core. No further details can been provided, the attack range has been given as local, severity medium. CVE-2015-2594 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core. This update fixes an issue related to guests using bridged networking via WiFi. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-07-06
    plugin id 86195
    published 2015-09-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=86195
    title Debian DLA-313-1 : virtualbox-ose security update
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Last major update 16-10-2013 - 12:55
Published 16-10-2013 - 11:55
Back to Top