Lucene search
K

CVE-2017-10235

🗓️ 08 Aug 2017 15:00:00Reported by oracleType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 63 Views🌐 WEB

Vulnerability in Oracle VM VirtualBox <5.1.24 allows unauthorized access and DOS attack

Related
Detection
Affected
Refs
Paths
Social
NVD
Vulners
Node
oraclevm_virtualboxRange5.1.22
[
  {
    "product": "Oracle VM VirtualBox",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "lessThan": "5.1.24",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
u16Lenpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4351Overflow can occur when copying TCP payload segments without proper length checks in e1kFallbackAddToFrame/e1kFallbackAddSegment.CWE-119
pDesc->data.cmd.u20DTALENpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4351Overflow can occur when copying TCP payload segments without proper length checks in e1kFallbackAddToFrame/e1kFallbackAddSegment.CWE-119
PhysAddrpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4351Overflow can occur when copying TCP payload segments without proper length checks in e1kFallbackAddToFrame/e1kFallbackAddSegment.CWE-119
cbNewPktpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4351Overflow can occur when copying TCP payload segments without proper length checks in e1kFallbackAddToFrame/e1kFallbackAddSegment.CWE-119
pThis->u16TxPktLenpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4351Overflow can occur when copying TCP payload segments without proper length checks in e1kFallbackAddToFrame/e1kFallbackAddSegment.CWE-119
u16Lenpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4364Unbounded DTALEN length can overflow 16288-byte fallback buffer via e1kFallbackAddSegment.CWE-119
pThis->u16TxPktLenpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4364Unbounded DTALEN length can overflow 16288-byte fallback buffer via e1kFallbackAddSegment.CWE-119
pDesc->data.cmd.u20DTALENpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4364Unbounded DTALEN length can overflow 16288-byte fallback buffer via e1kFallbackAddSegment.CWE-119
cbTxAllocpathhttps://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp?rev=64966#L4364Unbounded DTALEN length can overflow 16288-byte fallback buffer via e1kFallbackAddSegment.CWE-119

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 May 2026 00:24Current
6.8Medium risk
Vulners AI Score6.8
CVSS 23.6
CVSS 36.7
EPSS0.0231
SSVC
63