CVE-2021-2475

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.28

Description The issue is related to a buffer overflow in the Core component of Oracle VM VirtualBox, which can be exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox, leading to a denial of service.

Recommendations For versions prior to 6.1.28, update to version 6.1.28 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component to minimize the risk of exploitation.