Unrated severityNVD Advisory· Published Oct 21, 2015· Updated Jun 17, 2026

CVE-2015-4896

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.

Affected products

Oracle Corporation/VM Virtualbox2 versions
cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*range: >=4.0.0,<4.0.34
- (no CPE)range: <=4.0.34, <=4.1.42, <=4.2.34, <=4.3.32, <=5.0.8
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Tumbleweed
Range: < 5.1.10-2.5

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlnvdPatchVendor Advisory
lists.opensuse.org/opensuse-updates/2015-11/msg00000.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-updates/2015-11/msg00172.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2015/dsa-3384nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/77198nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1033880nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000