Is CVE-2014-0983 in the CISA KEV catalog?

No. CVE-2014-0983 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2014-0983?

CVE-2014-0983 has a CVSS v2 base score of 6.9 (MEDIUM).

What is the EPSS score for CVE-2014-0983?

CVE-2014-0983 has an EPSS score of 8.20% (94th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2014-0983?

Upgrade virtualbox on debian unstable to 4.3.10-dfsg-1 or later.

CVE & CISA-KEV Catalog

CVE-2014-0983

MEDIUMEPSS 94th pctl

6.9

CVSS v2

NVD

Description

Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled by the (1) CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to the crServerDispatchVertexAttrib1dARB function, (3) CR_VERTEXATTRIB1FARB_OPCODE to the crServerDispatchVertexAttrib1fARB function, (4) CR_VERTEXATTRIB1SARB_OPCODE to the crServerDispatchVertexAttrib1sARB function, (5) CR_VERTEXATTRIB2DARB_OPCODE to the crServerDispatchVertexAttrib2dARB function, (6) CR_VERTEXATTRIB2FARB_OPCODE to the crServerDispatchVertexAttrib2fARB function, (7) CR_VERTEXATTRIB2SARB_OPCODE to the crServerDispatchVertexAttrib2sARB function, (8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to the crServerDispatchVertexAttrib3fARB function, (10) CR_VERTEXATTRIB3SARB_OPCODE to the crServerDispatchVertexAttrib3sARB function, (11) CR_VERTEXATTRIB4DARB_OPCODE to the crServerDispatchVertexAttrib4dARB function, (12) CR_VERTEXATTRIB4FARB_OPCODE to the crServerDispatchVertexAttrib4fARB function, and (13) CR_VERTEXATTRIB4SARB_OPCODE to the crServerDispatchVertexAttrib4sARB function.

CWE-399Resource Management Errors

How to fix

Remediation Available

virtualboxDebian

Fixed in:4.3.10-dfsg-1CVE-2014-0983

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v2 Vector

No CVSS vector data available.

Exploit Intelligence

8.20%probability of exploitation in 30 days

94thpercentile

High risk: more likely to be exploited than 94% of all known CVEs.

References

Exploit2

Vendor Advisory1

secunia.com

Other references6

Related Vulnerabilities

Other CWE-399 (Resource Management Errors) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2009-3103	High	10.0	90%	-	-
CVE-2009-0075	High	9.3	85%	-	-
CVE-2005-1790	Low	2.6	83%	-	-
CVE-2010-0806	High	8.8	82%	KEV	-
CVE-2009-2526	High	7.8	82%	-	-
CVE-2015-1868	High	7.8	82%	-	Fix

Embed a live status badge for CVE-2014-0983

Markdown

[![CVE-2014-0983](https://tridentstack.com/cve/badge/CVE-2014-0983.svg)](https://tridentstack.com/cve/CVE-2014-0983)

HTML

<a href="https://tridentstack.com/cve/CVE-2014-0983"><img src="https://tridentstack.com/cve/badge/CVE-2014-0983.svg" alt="CVE-2014-0983"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-05-06.