PT-2025-16459 · Oracle+1 · Virtualbox+1

Zong Cao · Published 2025-04-15 · Updated 2025-09-24 · CVE-2025-30725

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.1.6

Description The issue allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox, as well as unauthorized update, insert, or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data.

Recommendations For Oracle VM VirtualBox version 7.1.6, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2025-05240

CVE-2025-30725

Affected Products

Virtualbox

Red Os

References · 15

• https://oracle.com/security-alerts/cpuapr2025.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30725 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05240 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30725 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-30725 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30725 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30725 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30725 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-virtualbox-cve-2025-30712-cve-2025-30725-cve-2025-30719 · Note
• https://twitter.com/Omar_LovesTech/status/1912566128414441954 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025041725 · Note
• https://twitter.com/CVEnew/status/1912247282772365637 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-virtualbox-guest-additions-cve-2025-30712-cve-2025-30725-cve-2025-30719 · Note
• https://t.me/cvetracker/21662 · Telegram Post