$ cve CVE-2009-2715 JSON

CVE-2009-2715 EXPLOIT

4.9

MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 65)

Patch early

A public exploit exists.

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction.

CVSS	4.9 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS	1.11% — more likely to be exploited than 65% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2009-08-07
Last modified	2026-06-16

Vendor	Product
sun	virtualbox

Source	Title	Date
exploit-db	Sun xVM VirtualBox 2.2 < 3.0.2 r49928 - Local Host Reboot (Denial of Service) (PoC)	2009-08-01