CVE-2021-2145: 
VirtualBox vulnerability analysis and mitigation

A vulnerability was identified in Oracle VM VirtualBox (CVE-2021-2145) affecting versions prior to 6.1.20. This vulnerability was disclosed in Oracle's April 2021 Critical Patch Update. The vulnerability is classified as difficult to exploit but allows high-privileged attackers with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise the system (Oracle CPU).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 (High) with the following vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H. This indicates that the vulnerability requires local access, high complexity to exploit, and high privileges, but can potentially impact confidentiality, integrity, and availability of the system (Oracle CPU, ZDI Advisory).

Successful exploitation of this vulnerability can result in takeover of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. The vulnerability can affect the confidentiality, integrity, and availability of the system when successfully exploited (Oracle CPU, ZDI Advisory).

Oracle has released security patches to address this vulnerability in VirtualBox version 6.1.20. Users are strongly advised to upgrade to this version or later to mitigate the vulnerability. The fix was included in Oracle's April 2021 Critical Patch Update (Oracle CPU, Gentoo Advisory).