CVE-2008-3431

8.8 highKEVEPSS 6.9%

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \\.\VBoxDrv device and calling DeviceIoControl to send a crafted kernel address.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 6.9% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2022-03-03, due 2022-03-24
Published: 2008-08-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:virtualbox

References

http://secunia.com/advisories/31361
http://securityreason.com/securityalert/4107
http://securitytracker.com/id?1020625
http://sunsolve.sun.com/search/document.do?assetkey=1-66-240095-1
http://virtualbox.org/wiki/Changelog

Check your stack JSON