Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-2715

CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.9MEDIUM
EPSS
0.2%
top 58.98%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SUN Virtualbox
Timeline
PublishedAug 7
Latest updateMay 2

Description

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction.

CVSS vector

AV:L/AC:L/C:N/I:N/A:CExploitability: 3.9 | Impact: 6.9

Affected Packages1 packages

▶NVDsun/virtualbox2.2, 3.0.2+1

🔴Vulnerability Details

2
GHSA
GHSA-r55x-r82c-hmq3: Sun VirtualBox 2↗2022-05-02
▶
CVEList
CVE-2009-2715: Sun VirtualBox 2↗2009-08-07
▶

💥Exploits & PoCs

1
Exploit-DB
Sun xVM VirtualBox 2.2 < 3.0.2 r49928 - Local Host Reboot (Denial of Service) (PoC)↗2009-08-01
▶
CVE-2009-2715 (MEDIUM CVSS 4.9) | Sun VirtualBox 2.2 through 3.0.2 r4 | cvebase.io