Skip to content
Fencer Intel
medium 5.0

CVE-2015-4896 json

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32,…

published 2015-10-21 11 y ago modified 2026-06-17 4 mo ago also EUVD-2015-4913

cvss
5.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
3.7%
EPSS 3.7% chance of exploitation in 30 days, percentile 89%
public exploits
0
none known

Summary

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.

Patch / fix

  • oracle vm_virtualbox 4.0.34, 4.1.42, 4.2.34, 4.3.32, 5.0.8
  • virtualbox Ubuntu 14.04 LTS 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1

ubuntu advisories UBUNTU-CVE-2015-4896

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • virtualbox openSUSE Tumbleweed 5.1.10-2.5

opensuse advisories openSUSE-SU-2024:10020-1

Exploit prediction

3.67% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.