Oracle VM VirtualBox 'crNetRecvReadback()' Function Memory Corruption Vulnerability

Bugtraq ID:	66131
Class:	Design Error
CVE:	CVE-2014-0981
Remote:	No
Local:	Yes
Published:	Mar 11 2014 12:00AM
Updated:	Aug 01 2014 12:20AM
Credit:	CoreLabs
Vulnerable:	Oracle VM VirtualBox 4.1 Oracle VM VirtualBox 4.0 Oracle VM VirtualBox 3.2 Oracle VM VirtualBox 3.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Oracle VM VirtualBox 'crNetRecvReadback()' Function Memory Corruption Vulnerability

Oracle VM VirtualBox is prone to a memory-corruption vulnerability.

Attackers may exploit this issue to execute arbitrary code in the context of the hypervisor running in the host operating system. Failed exploits may result in a denial-of-service condition.

Oracle VM VirtualBox 'crNetRecvReadback()' Function Memory Corruption Vulnerability

The following proof-of-concept is available:

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

• /data/vulnerabilities/exploits/66131.c

Oracle VM VirtualBox 'crNetRecvReadback()' Function Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle VM VirtualBox 'crNetRecvReadback()' Function Memory Corruption Vulnerability

References:

• VirtualBox Homepage (Sun Microsystems)