CVE-2023-21899

The CVE-2023-21899 issue affects Oracle VM VirtualBox (Core). Affected versions are before 6.1.42 and before 7.0.6. It is a local, low-privilege exploit that can cause a hang or a frequent crash (Denial of Service) of VirtualBox, with Windows guests specifically noted. No remote/vector exploit is...

CVE-2023-21899

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2023-21898

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2023-21889

CVE-2023-21889 affects Oracle VM VirtualBox (Core). Affected: VirtualBox versions prior to 6.1.42 and prior to 7.0.6. Exploitation requires local access (logon) to the infrastructure where VirtualBox runs. Impact: unauthorized read access to a subset of VirtualBox data. No details on root cause b...

CVE-2023-21889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2023-21885

CVE-2023-21885 pertains to Oracle VM VirtualBox (Core) with affected releases before 6.1.42 and before 7.0.6. The issue allows a low-privilege user who can log on to the host to compromise VirtualBox, potentially enabling read access to a subset of data. Windows hosts only. Mitigation: upgrade to...

CVE-2023-21886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Orac...

CVE-2023-21886

CVE-2023-21886 affects Oracle VM VirtualBox (Core) with affected versions prior to 6.1.42 and prior to 7.0.6. An unauthenticated attacker can exploit via network protocols to remotely take over VirtualBox. CVSS v3.1 base score is 8.1 (H, H, H). Remediation in the connected documents points to upg...

CVE-2023-21885

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2023-21884

CVE-2023-21884 affects Oracle VM VirtualBox (Core) where affected versions are prior to 6.1.42 and prior to 7.0.6. An attacker with local logon and high privileges can cause a hang or frequent crashes (DoS) of VirtualBox. Multiple connected advisories corroborate the same fixed versions: upgrade ...

CVE-2023-21884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

Oracle VM VirtualBox 安全漏洞

A security vulnerability exists in Oracle VM VirtualBox, a virtual machine management software from Oracle Corporation. An unauthenticated attacker can use this vulnerability to compromise Oracle VM VirtualBox by accessing the network via multiple protocols...

KLA20165 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability in Core can be exploit...

PT-2023-1181 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.42 Oracle VM VirtualBox versions prior to 7.0.6 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Oracle VirtualBox: Multiple Vulnerabilities

Background VirtualBox is a powerful virtualization product from Oracle. Description Multiple vulnerabilities have been discovered in Oracle VirtualBox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There...

GLSA-202212-03 : Oracle VirtualBox: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202212-03 Oracle VirtualBox: Multiple Vulnerabilities - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit...

[SECURITY] Fedora 37 Update: freerdp-2.9.0-1.fc37

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] Fedora 36 Update: freerdp-2.9.0-1.fc36

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] Fedora 35 Update: freerdp-2.8.1-1.fc35

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...