Unscored severity · published Nov 16, 2009
CVE-2009-3940
Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Virtualbox · Sun
through 3.0.8; 2.0.8; 2.0.10; 2.2; 3.0; 3.0.0; +3 more · source: NVD
XV
Xvm Virtualbox · Sun
1.6; 1.6.0; 1.6.2; 1.6.4; 2.0.0; 2.0.2; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3940
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3940
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
secunia.com
http://secunia.com/advisories/38420
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1
More from Virtualbox
–
CVE-2009-3923
The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified…
–
CVE-2009-3692
Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges…
–
CVE-2009-2715
Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction
–
CVE-2009-2714
Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors