CVE-2021-2130

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18

Description: The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue can allow an attacker to cause a denial of service, resulting in a hang or frequently repeatable crash of Oracle VM VirtualBox. A high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes can compromise Oracle VM VirtualBox.

Recommendations: For versions prior to 6.1.18, update to version 6.1.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.