OPENSUSE-SU-2021:1092-1 Security update for virtualbox

This update for virtualbox fixes the following issues: Version bump to 6.1.24 released July 20 2021 by Oracle This is a maintenance release. The following items were fixed and/or added: - Storage: Fixed starting a VM if a device is attached to a VirtIO SCSI port higher than 30 bug 20213 - Storage...

Remote Code Execution (RCE)

virtualbox:sid is vulnerable to remote code execution.Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...

Denial Of Service (DoS)

virtualbox:sid is vulnerable to remote code execution.Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox...

Denial Of Service (DoS)

virtualbox is vulnerable to denial of service. An easily exploitable vulnerability allows a high privileged attacker with logon to the infrastructure to crash the application...

Arbitrary Code Execution

virtualbox is vulnerable to arbitrary code execution. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to execute arbitrary code on the host OS...

Oracle VirtualBox Security Update (cpujul2021) - Windows

This host is missing a security update according to Oracle. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Security Update (cpujul2021) - Mac OS X

This host is missing a security update according to Oracle. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Security Update (cpujul2021) - Linux

This host is missing a security update according to Oracle. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Updated virtualbox packages fix security vulnerability

This update provides the upstream 6.1.24 maintenance release that fixes at least the following security vulnerabilities: An easily exploitable vulnerability in the Oracle VM VirtualBox component: Core prior to 6.1.24 allows high privileged attacker with logon to the infrastructure where Oracle VM...

MGASA-2021-0385 Updated virtualbox packages fix security vulnerability

This update provides the upstream 6.1.24 maintenance release that fixes at least the following security vulnerabilities: An easily exploitable vulnerability in the Oracle VM VirtualBox component: Core prior to 6.1.24 allows high privileged attacker with logon to the infrastructure where Oracle VM...

Oracle VM VirtualBox (July 2021 CPU)

The version of Virtualbox installed on the remote host is prior to 6.1.24. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2021 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that i...

Oracle VM VirtualBox Unauthorized Access Vulnerability (CNVD-2021-54712)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.24. An attacker could use this vulnerability to gain unauthorized read access to a portion of the product-accessibl...

Oracle VM VirtualBox Unauthorized Access Vulnerability (CNVD-2021-54713)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.24. An attacker could exploit the vulnerability to take over the product...

Oracle VM VirtualBox has an unspecified vulnerability (CNVD-2021-54711)

Oracle VM VirtualBox is a powerful cross-platform virtualization software for x86 systems.A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.24. An attacker could exploit this vulnerability to cause the product to hang or crash frequently...

Oracle VirtualBox NAT Numeric Truncation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2021-2442

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2443

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2442

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2443

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Buffer overflow

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...