Sun VirtualBox vulnerabilities

5 CVEs affecting Sun VirtualBox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3940, published 2009-11-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3923, published 2009-11-10. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors…
CVE-2009-2715, published 2009-08-07. Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days. Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction.
CVE-2009-3692, published 2009-10-13. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors.
CVE-2009-2714, published 2009-08-07. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors.
CVE-2009-3940, published 2009-11-16. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of…