Veille CVE
CVE-2008-3431
8.8 Élevée Exploitée activementCatalogue CISA KEV — Oracle VirtualBox Insufficient Input Validation Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 24/03/2022
Action requise : Apply updates per vendor instructions.
Description
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| 3.1 | 8.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| 2.0 | 7.2 Élevée | nvd@nist.gov (NVD) | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Références
- http://secunia.com/advisories/31361 Broken LinkVendor Advisory
- http://securityreason.com/securityalert/4107 Broken Link
- http://securitytracker.com/id?1020625 Broken LinkThird Party AdvisoryVDB Entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1 Broken Link
- http://virtualbox.org/wiki/Changelog Product
- http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability ExploitThird Party Advisory
- http://www.securityfocus.com/archive/1/495095/100/0/threaded Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/30481 Broken LinkExploitThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/2293 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44202 Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/6218 ExploitThird Party AdvisoryVDB Entry
- http://secunia.com/advisories/31361 Broken LinkVendor Advisory
- http://securityreason.com/securityalert/4107 Broken Link
- http://securitytracker.com/id?1020625 Broken LinkThird Party AdvisoryVDB Entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1 Broken Link
- http://virtualbox.org/wiki/Changelog Product
- http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability ExploitThird Party Advisory
- http://www.securityfocus.com/archive/1/495095/100/0/threaded Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/30481 Broken LinkExploitThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/2293 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44202 Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/6218 ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-3431 US Government Resource