| Reporter | Title | Published | Views | Family All 39 |
|---|---|---|---|---|
 | Oracle VirtualBox < 5.1.30 / < 5.2-rc1 - Guest to Host Escape Vulnerability | 25 Jan 201800:00 | – | zdt |
 | Exploit for Incorrect Type Conversion or Cast in Redhat Enterprise_Linux_Desktop | 16 Jan 201913:15 | – | githubexploit |
 | Oracle VM VirtualBox Core Component Command Execution | 2 Feb 201800:00 | – | bdu_fstec |
 | CVE-2018-2698 | 28 Jan 201818:28 | – | circl |
 | Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02020) | 18 Jan 201800:00 | – | cnvd |
 | CVE-2018-2698 | 18 Jan 201802:00 | – | cvelist |
 | CVE-2018-2698 | 18 Jan 201802:00 | – | debiancve |
 | Oracle VirtualBox < 5.1.30 / < 5.2-rc1 - Guest to Host Escape | 24 Jan 201800:00 | – | exploitdb |
 | EUVD-2018-14553 | 7 Oct 202500:30 | – | euvd |
 | Oracle VirtualBox 5.1.30 5.2-rc1 - Guest to Host Escape | 24 Jan 201800:00 | – | exploitpack |
10
Node
OR
[
{
"product": "VM VirtualBox",
"vendor": "Oracle Corporation",
"versions": [
{
"lessThan": "5.1.32",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "5.2.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]| Source | Link |
|---|---|
| securitytracker | www.securitytracker.com/id/1040202 |
| oracle | www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html |
| securityfocus | www.securityfocus.com/bid/102688 |
| exploit-db | www.exploit-db.com/exploits/43878/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| VBOXVDMACMD_DMA_BPB_TRANSFER.cbTransferSize | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_BPB_TRANSFER allows guest-controlled memory copy between VRAM addresses without bounds checks, enabling arbitrary VRAM read/write and guest-to-host memory access. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_BPB_TRANSFER.Src.offVramBuf | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_BPB_TRANSFER allows guest-controlled memory copy between VRAM addresses without bounds checks, enabling arbitrary VRAM read/write and guest-to-host memory access. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_BPB_TRANSFER.Dst.offVramBuf | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_BPB_TRANSFER allows guest-controlled memory copy between VRAM addresses without bounds checks, enabling arbitrary VRAM read/write and guest-to-host memory access. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_BPB_TRANSFER.fFlags | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_BPB_TRANSFER allows guest-controlled memory copy between VRAM addresses without bounds checks, enabling arbitrary VRAM read/write and guest-to-host memory access. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_PRESENT_BLT.offSrc | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_PRESENT_BLT allows guest-controlled offsets to be applied to VRAM addresses without proper bounds checks, enabling arbitrary VRAM reads/writes through VBVA/Blt path. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_PRESENT_BLT.offDst | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_PRESENT_BLT allows guest-controlled offsets to be applied to VRAM addresses without proper bounds checks, enabling arbitrary VRAM reads/writes through VBVA/Blt path. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_PRESENT_BLT.dstDesc.pitch | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_PRESENT_BLT allows guest-controlled offsets to be applied to VRAM addresses without proper bounds checks, enabling arbitrary VRAM reads/writes through VBVA/Blt path. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_PRESENT_BLT.srcDesc.pitch | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_PRESENT_BLT allows guest-controlled offsets to be applied to VRAM addresses without proper bounds checks, enabling arbitrary VRAM reads/writes through VBVA/Blt path. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_PRESENT_BLT.cDstSubRects | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_PRESENT_BLT allows guest-controlled offsets to be applied to VRAM addresses without proper bounds checks, enabling arbitrary VRAM reads/writes through VBVA/Blt path. | CVE-2018-2698 |
| VBOXVDMACMD_DMA_PRESENT_BLT.aDstSubRects | binary | /dev/vboxpwn | Out-of-bounds read/write in VBOXVDMACMD_DMA_PRESENT_BLT allows guest-controlled offsets to be applied to VRAM addresses without proper bounds checks, enabling arbitrary VRAM reads/writes through VBVA/Blt path. | CVE-2018-2698 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:56Current
6.1Medium risk
Vulners AI Score6.1
CVSS 24.1
CVSS 38.8
EPSS0.01658
SSVC