Skip to content
COOEY

EXPOSURES › CVE-2008-3431

CVE-2008-3431

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2008-3431 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wildunpatched

Oracle VirtualBox's VBoxDrv.sys driver had an input validation flaw allowing local arbitrary code execution.

The VBoxDrv.sys driver in Oracle VirtualBox suffered from insufficient input validation, enabling local attackers to execute arbitrary code. DIB organizations must ensure VirtualBox is patched and monitored, as this flaw was actively exploited in the wild and represents a significant compliance risk for systems relying on virtualization.

Shame score — The vulnerability was actively exploited in the wild and allowed local code execution, indicating a failure to patch a known issue before it was weaponized.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.

AFFECTED FEDRAMP PRODUCTS · 10
PRODUCTSTATUS
Aconex for Defense
Oracle
Authorized
Federal Managed Cloud Services
Oracle
Authorized
Fusion Cloud
Oracle
Authorized
Government Cloud - Common Controls
Oracle
Authorized
Oracle Cloud Infrastructure-Government Cloud
Oracle
Authorized
Oracle Enterprise Performance Management (EPM)
Oracle
Authorized
Oracle Enterprise Performance Management (EPM) - Moderate
Oracle
In Process
Oracle Service Cloud
Oracle
Authorized
Oracle Service Cloud (DOD)
Oracle
Authorized
Taleo Cloud - U.S. Government Cloud
Oracle
Authorized