Vulnerability in Vboxcomm Satellite Express Protocol

CVE-2015-6923

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.

EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.

Affected products

References