A vulnerability has been reported in Sun VirtualBox, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the VirtualBox Guest Additions and can be exploited to exhaust all available kernel memory inside a guest operating system.

Successful exploitation requires that Guest Additions are installed on the guest operating system.

The vulnerability is reported in the following versions:
* Sun xVM VirtualBox Guest Additions 1.6 (all releases)
* Sun xVM VirtualBox Guest Additions 2.0.0, 2.0.2, 2.0.4, 2.0.6, 2.0.8, 2.0.10
* Sun xVM VirtualBox Guest Additions 2.1 (all releases)
* Sun xVM VirtualBox Guest Additions 2.2 (all releases)
* Sun VirtualBox Additions 3.0.0, 3.0.2, 3.0.4, 3.0.6 and 3.0.8

Solution
Update to Sun xVM VirtualBox version 2.0.12 or Sun VirtualBox version 3.0.10. Please see the vendor's advisory for additional information.

Provided and/or discovered by
The vendor credits Thomas Biege of SUSE.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Sun:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1

Thomas Biege:
http://thetoms-random-thoughts.blogspot.com/2009/11/virtualbox-ose-guest-can-trigger-denial.html

Deep Links
Links available to Secunia VIM customers