CVE-2012-3221: oracle virtualization

EPSS trend

Probability

0.79%

Chance of exploitation in the next 30 days

Percentile

56%

Versus all other CVEs

30-day change

0.00 pp

From 0.79% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.79%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinux_x86-64Unverified
Oracle VM VirtualBox 4.1 - Local Denial of Service
Maturity: poc

References

7 links

www.securityfocus.com/bid/56045VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/79380VDB EntryX Refsource XF
www.securitytracker.com/id?1027666VDB EntryX Refsource SECTRACK
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16681VDB EntrySignatureX Refsource OVAL
www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlX Refsource CONFIRMPatchVendor Advisory
www.debian.org/security/2012/dsa-2594Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDVSA-2013:150Vendor AdvisoryX Refsource MANDRIVA

Related vulnerabilities

CVE-2013-0420ubuntuvirtualbox+30.40%13y ago17-01-2013 01:30Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."CVE-2013-3782oraclevirtualization1.35%13y ago17-07-2013 10:00Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 prior to 4.63 and 4.7 prior to 4.71 allows remote attackers to affect integrity via unknown vectors related to Web UI.CVE-2013-3834oraclevirtualization1.28%13y ago16-10-2013 15:00Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote attackers to affect availability via unknown vectors related to ttaauxserv.CVE-2013-3779oraclevirtualization+11.58%13y ago17-07-2013 10:00Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.CVE-2021-20191alpineansible+110.35%5y ago26-05-2021 00:00A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.CVE-2015-2581oraclevirtualization2.19%11y ago16-07-2015 10:00Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via unknown vectors related to JServer.

All vulnerabilities invirtualization

CVE-2012-3221: oracle virtualization

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References