CVE-2014-6540

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.

How to fix CVE-2014-6540

To remediate CVE-2014-6540, upgrade the affected package to a fixed version below.

• Debian/virtualbox-guest-additions-iso—upgrade to 4.3.14-1 or later

Is CVE-2014-6540 being exploited?

Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 4.3.14-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2014-6540