CVE-2021-2454: 
VirtualBox vulnerability analysis and mitigation

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) affects versions prior to 6.1.24. This is a difficult to exploit vulnerability that allows low privileged attackers with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise the system. The vulnerability was disclosed in Oracle's July 2021 Critical Patch Update (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 7.0 (High) with the following vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates local access is required, high attack complexity, low privileges needed, no user interaction required, and high impacts on confidentiality, integrity, and availability (NVD).

Successful exploitation of this vulnerability can result in complete takeover of Oracle VM VirtualBox, potentially compromising the confidentiality, integrity, and availability of the virtualization environment (Oracle Advisory).

Oracle has released a security patch for this vulnerability in VirtualBox version 6.1.24. Users are strongly advised to upgrade to this version or later to address the vulnerability. Gentoo users should upgrade to version 6.1.36 or later (Gentoo Advisory).