Candidate: CVE-2014-2488 PublicDate: 2014-07-17 05:10:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2488 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core. Ubuntu-Description: Notes: Bugs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754939 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_virtualbox-ose: upstream_virtualbox-ose: needs-triage lucid_virtualbox-ose: ignored (reached end-of-life) precise_virtualbox-ose: DNE trusty_virtualbox-ose: DNE trusty/esm_virtualbox-ose: DNE utopic_virtualbox-ose: DNE vivid_virtualbox-ose: DNE vivid/stable-phone-overlay_virtualbox-ose: DNE vivid/ubuntu-core_virtualbox-ose: DNE wily_virtualbox-ose: DNE devel_virtualbox-ose: DNE Patches_virtualbox: upstream_virtualbox: released (4.3.12-dfsg-1) lucid_virtualbox: DNE precise_virtualbox: released (4.1.44-dfsg-1+deb7u1ubuntu1) trusty_virtualbox: released (4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1) trusty/esm_virtualbox: DNE (trusty was released [4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1]) utopic_virtualbox: not-affected (4.3.12-dfsg-1) vivid_virtualbox: not-affected (4.3.12-dfsg-1) vivid/stable-phone-overlay_virtualbox: DNE vivid/ubuntu-core_virtualbox: DNE wily_virtualbox: not-affected (4.3.12-dfsg-1) devel_virtualbox: not-affected (4.3.12-dfsg-1)