← CVE Radar
CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.
8.8 HIGHEPSS 6.87%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| 7.2 | HIGH | 2.0NVD | AV:L/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2008-3431
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Aug 5, 2008
- Last modified
- 2026-06-16 22:55 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
oraclevirtualbox1 version range
- before 1.6.4
References
- secunia.com http://secunia.com/advisories/31361
- securityreason.com http://securityreason.com/securityalert/4107
- securitytracker.com http://securitytracker.com/id?1020625
- sunsolve.sun.com http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1
- virtualbox.org http://virtualbox.org/wiki/Changelog
- coresecurity.com http://www.coresecurity.com/content/virtualbox-privilege-escalation-vulnerability
- securityfocus.com http://www.securityfocus.com/archive/1/495095/100/0/threaded
- securityfocus.com http://www.securityfocus.com/bid/30481
- vupen.com http://www.vupen.com/english/advisories/2008/2293
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/44202
- exploit-db.com https://www.exploit-db.com/exploits/6218
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-3431