Published: 20/01/2021 Updated: 30/06/2022

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 6 | Impact Score: 4 | Exploitability Score: 1.5

VMScore: 188

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is before 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle vm virtualbox

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) The supported version that is affected is Prior to 6118 Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox While the vulnerability is ...

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

Sauercloude 0day VirtualBox 612 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

RWCTF21-VirtualBox-61-escape 0day VirtualBox 61 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals Currently a 0day but we'll add the CVE number once there is one CVE-2021-2119 How does it work? We wrote a blogpost describing the vulnerabilities and our exploit techniques

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

Sauercloude 0day VirtualBox 612 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

NVD-CWE-noinfo https://www.oracle.com/security-alerts/cpujan2021.html https://security.gentoo.org/glsa/202101-15 https://security.gentoo.org/glsa/202104-08 https://nvd.nist.gov https://github.com/shi10587s/Sauercloude https://security.archlinux.org/CVE-2021-2119

CVE-2021-2119

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect