Jason Geffner discovered a buffer overflow in the emulated floppy
disk drive, resulting in potential privilege escalation.
For the oldstable distribution (wheezy), this problem has been fixed
in version 4.1.18-dfsg-2+deb7u5.
For the stable distribution (jessie), this problem has been fixed in
version 4.3.18-dfsg-3+deb8u2.
For the unstable distribution (sid), this problem has been fixed in
version 4.3.28-dfsg-1.
We recommend that you upgrade your virtualbox packages.