Authentication Bypass

virtualbox is vulnerable to authentication bypass. The vulnerability exists in the Oracle VM VirtualBox product of Oracle Virtualization which allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...

Authentication Bypass

virtualbox is vulnerable to authentication bypass. The vulnerability exists in the Oracle VM VirtualBox product of Oracle Virtualization which allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...

Authentication Bypass

virtualbox is vulnerable to authentication bypass. The vulnerability exists in the Oracle VM VirtualBox product of Oracle Virtualization which allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the double memory release during the processing of input/output messages from the smart card. Exploiting this vulnerability allows an attacker to gain full control over the application by sending specially...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Mageia: Security Advisory (MGASA-2022-0390)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0390 Updated virtualbox packages fix security vulnerabilities

This update provides the upstream 6.1.40 maintenance release that fixes at least the following security vulnerabilities: Vulnerability in the Oracle VM VirtualBox prior to 6.1.40 contains a difficult to exploit vulnerability that allows high privileged attacker with logon to the infrastructure...

Updated virtualbox packages fix security vulnerabilities

This update provides the upstream 6.1.40 maintenance release that fixes at least the following security vulnerabilities: Vulnerability in the Oracle VM VirtualBox prior to 6.1.40 contains a difficult to exploit vulnerability that allows high privileged attacker with logon to the infrastructure...

Mageia: Security Advisory (MGASA-2022-0379)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. The vulnerability exists because an attacker with logon infrastructure is able to compromise the virtualbox causing an application crash...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. The vulnerability exists because an attacker with logon infrastructure is able to compromise the virtualbox causing an application crash...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. The vulnerability exists because an attacker with logon infrastructure is able to compromise the virtualbox causing an application crash...

Oracle VirtualBox COM RPC Interface Improper Access Control Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the COM RPC...

Oracle VirtualBox VRDP Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle VirtualBox. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of smartcard I/O messages. The issue results from the lack of proper...

Oracle VirtualBox VRDP Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle VirtualBox. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of USB Request Block messages. The issue results from the lack of proper...

Oracle VirtualBox VRDP Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle VirtualBox. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of smartcard I/O messages. The issue results from the lack of validating...

Oracle VM VirtualBox < 6.1.40 Multiple Vulnerabilities Windows (Oct 2022 CPU)

The version of VirtualBox installed on the remote host is prior to 6.1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the Oct 2022 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are...

Oracle VM VirtualBox < 6.1.38 (Oct 2022 CPU)

The version of VirtualBox installed on the remote host is prior to 6.1.38. It is, therefore, affected by multiple vulnerabilities as referenced in the Oct 2022 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are...

Oracle VM VirtualBox < 6.1.40 (Oct 2022 CPU)

The version of VirtualBox installed on the remote host is prior to 6.1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the Oct 2022 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are...

Oracle VM VirtualBox Denial of Service Vulnerability (CNVD-2023-11169)

Oracle VM VirtualBox is a virtual machine management software from Oracle. A security vulnerability exists in Oracle VM VirtualBox component: Core versions prior to 6.1.40. An attacker can exploit this vulnerability to compromise Oracle VM VirtualBox, which could cause Oracle VM VirtualBox to han...