CVE-2009-3940

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-11-16 · updated 2026-06-16

Description

Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors.

Affected products

Sun Virtualbox: through 3.0.8; 2.0.8, 2.0.10, 2.2, 3.0, 3.0.0, 3.0.2 (+2)
Sun Xvm Virtualbox: 1.6, 1.6.0, 1.6.2, 1.6.4, 2.0.0, 2.0.2 (+7)

References

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
http://secunia.com/advisories/38420
http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
http://secunia.com/advisories/38420
http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1

Get alerted when CVE-2009-3940 or the next vulnerability affects your stack