Oracle · Virtualbox · CVE-2023-21884
**Name of the Vulnerable Software and Affected Versions**
Oracle VM VirtualBox versions prior to 6.1.42
Oracle VM VirtualBox versions prior to 7.0.6
**Description**
The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.
**Recommendations**
For Oracle VM VirtualBox versions prior to 6.1.42, update to version 6.1.42 or later.
For Oracle VM VirtualBox versions prior to 7.0.6, update to version 7.0.6 or later.
As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.