Published: 20/10/2021 Updated: 22/09/2022

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is before 6.1.28. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle vm virtualbox

A security issue has been found in Oracle VM VirtualBox before version 6128 An easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox Successful attacks of this vulnerability can result in the unauthorized ability to cause a hang or ...

VirtualBox_IO-Fuzz Version Product : VirtualBox Build 6116, 6126 Host OS : Windows 10 x64 (190411288) Guest OS : Ubuntu 2004 (Focal Fossa) Result CVE-2021-2086 : Oracle VirtualBox I/O Request 0x177 Denial-of-Service CVE-2021-35540 : Oracle VirtualBox I/O Request 0x20, 0xa0 Denial-of-Service Reference CVE-2020-8871: PRIVILEGE ESCALATION IN PARALLELS DESKTOP VIA VGA DEVICE

NVD-CWE-noinfo https://www.oracle.com/security-alerts/cpuoct2021.html https://security.gentoo.org/glsa/202208-36 https://nvd.nist.gov https://github.com/dlehgus1023/VirtualBox_IO-Fuzz https://security.archlinux.org/CVE-2021-35540

CVE-2021-35540

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect