CVE-2013-3792: oracle vm_virtualbox
Vulnerability summary
CVE-2013-3792 is a low (CVSS 3.8) vulnerability in oracle vm_virtualbox. EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 46% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 16-10-2013PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0.20, 4.1.28, and 4.2.18 allows local users to affect availability via unknown vectors related to Core.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.57%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
0.00 pp
From 0.57% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundOracle VM VirtualBox 4.0 - 'tracepath' Local Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia6 products
- kmod-vboxadditions< 4.2.16-1.mga2
- kmod-virtualbox< 4.2.16-1.mga2
- virtualbox< 4.2.16-1.mga2
- kmod-vboxadditions< 4.2.16-1.mga3
- kmod-virtualbox< 4.2.16-1.mga3
Oracle1 product
- vm_virtualbox≤ 4.2.16 | 4.2.0 | 4.2.2 | 4.2.4 | 4.2.6 | 4.2.8 | 4.2.10 | 4.2.12 | 4.2.14 | ≤ 3.2.16 | 3.0 | 3.0.0 | 3.0.2 | 3.0.4 | 3.0.6 | 3.0.8 | 3.0.10 | 3.0.12 | 3.0.14 | 3.1 | 3.1.0 | 3.1.2 | 3.1.4 | 3.1.6 | 3.1.8 | 3.2 | 3.2.0 | 3.2.2 | 3.2.4 | 3.2.6 | 3.2.8 | 3.2.10 | 3.2.12 | 3.2.14 | ≤ 4.1.26 | 4.1.0 | 4.1.2 | 4.1.4 | 4.1.6 | 4.1.8 | 4.1.10 | 4.1.12 | 4.1.14 | 4.1.16 | 4.1.18 | 4.1.20 | 4.1.22 | 4.1.24 | ≤ 4.0.18 | 4.0 | 4.0.0 | 4.0.2 | 4.0.4 | 4.0.6 | 4.0.8 | 4.0.10 | 4.0.12 | 4.0.14 | 4.0.16
2 vendors · 7 products
References
5 links- www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMVendor Advisory