CVE-2015-6923
vboxcomm satellite express protocol: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- vboxcomm:satellite_express_protocol
References
- http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2015/Sep/72
- http://www.securityfocus.com/archive/1/536491/100/0/threaded
- https://www.exploit-db.com/exploits/38225/
- https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt