Sun xVM VirtualBox < 3.0.4 Multiple Local Denial of Service Vulnerabilities

Medium Nessus Plugin ID 40549


The remote Windows host has an application that is affected by local denial of service vulnerabilities.


The remote host contains a version of Sun xVM VirtualBox, an open source virtualization platform, before 3.0.4. Such versions have multiple local denial of service vulnerabilities. A guest virtual machine (VM) can reboot the host machine by executing the 'sysenter' instruction. The vendor states there are several other denial of service vulnerabilities in addition to this.

An attacker with access to the guest VM could leverage these to cause a denial of service.


Upgrade to Sun xVM VirtualBox 3.0.4 or later.

See Also

Plugin Details

Severity: Medium

ID: 40549

File Name: virtualbox_3_0_4.nasl

Version: $Revision: 1.15 $

Type: local

Agent: windows

Family: Windows

Published: 2009/08/11

Modified: 2016/05/19

Dependencies: 40548

Risk Information

Risk Factor: Medium


Base Score: 4.9

Temporal Score: 3.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:sun:xvm_virtualbox

Required KB Items: VirtualBox/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2009/08/03

Vulnerability Publication Date: 2009/08/03

Reference Information

CVE: CVE-2009-2714, CVE-2009-2715

BID: 35915, 35960

OSVDB: 56810, 56893

EDB-ID: 9323

Secunia: 36080

CWE: 20