CVE-2008-3431 The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with th...
HighCVSS 8.8
EPSS 6.9%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle virtualbox | < 1.6.4 | 1.6.4 |
References
- 31361 broken-link third-party-advisory vendor-advisory
- 4107 broken-link third-party-advisory
- 1020625 broken-link third-party-advisory vdb-entry
- 240095 broken-link vendor-advisory
- virtualbox.org product
- www.coresecurity.com exploit third-party-advisory
- 20080804 CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability broken-link mailing-list third-party-advisory vdb-entry
- 30481 broken-link exploit third-party-advisory vdb-entry
- ADV-2008-2293 broken-link vdb-entry
- sun-xvmvirtualbox-privilege-escalation(44202) third-party-advisory vdb-entry
- 6218 exploit third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource