CVE-2009-3940: Sun VirtualBox

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors.

Affected products

• Sun VirtualBox: up to and including 3.0.8; version 2.0.8 only; version 2.0.10 only; version 2.2 only; version 3.0 only; version 3.0.0 only; …
• Sun Xvm VirtualBox: any version; version 1.6 only; version 1.6.0 only; version 1.6.2 only; version 1.6.4 only; version 2.0.0 only; …

Published 2009-11-16. Last modified 2026-06-16.