CVE-2015-6923

Published: Sep 21, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.

Affected (1)

Products: Vboxcomm: Satellite Express Protocol

Vboxcomm

1 product

Satellite Express Protocol

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vboxcomm Satellite Express Protocol	Version 2.3.17.3

References (10)

http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/Sep/72

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/536491/100/0/threaded

Source: cve@mitre.org

https://www.exploit-db.com/exploits/38225/

Source: cve@mitre.org

Exploit

https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt

Source: cve@mitre.org

Exploit

http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html