CVE-2022-21491

Summary of CVE-2022-21491 (Oracle VM VirtualBox Core) : A vulnerability affects Oracle VM VirtualBox on Windows hosts, with affected versions prior to 6.1.34. The issue allows a local, low-privilege attacker with logon to the host to compromise VirtualBox, potentially leading to takeover of the V...

CVE-2022-21488

CVE-2022-21488 affects Oracle VM VirtualBox before 6.1.34 (Core). The issue allows a low-privileged, local attacker with logon to the host to compromise VirtualBox, with potential unauthorized update/insert/delete of some VirtualBox data (I:LOW, C:N, A:N). The vulnerability’s root cause is descri...

CVE-2022-21488

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21488

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21487

Vulnerability CVE-2022-21487 affects Oracle VM VirtualBox (Core) prior to 6.1.34. An easily exploitable issue allows a low-privileged attacker with local logon to the host to read a subset of VirtualBox data (impacting confidentiality). Mitigation: upgrade to VirtualBox 6.1.34 or newer (per advis...

CVE-2022-21471

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21471

CVE-2022-21471 affects Oracle VM VirtualBox (Core) with versions before 6.1.34. The vulnerability can be exploited by a locally logged-on, low-privilege attacker to cause a hang or a frequent crash (DoS) of VirtualBox, with potential impact on additional Oracle products. The issue is repeatedly c...

CVE-2022-21471

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21465

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2022-21465

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2022-21465

CVE-2022-21465 affects Oracle VM VirtualBox (Core) prior to version 6.1.34. The issue allows a high-privilege attacker with local access to the host to cause a hang or crash (DOS) and potentially unauthorized data updates/deletions within VirtualBox, with impact on related products. Affected vers...

CVE-2022-21465

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Moderate: Red Hat Security Advisory: OpenShift Virtualization 2.6.10 RPMs security and bug fix update

Red Hat OpenShift Virtualization release 2.6.10 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which giv...

Oracle Virtualization: Input validation error vulnerability

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation. Oracle VM VirtualBox is a virtual machine management software for Oracle Virtualization. VirtualBox is vulnerable to an input validation error that allows a low privilege attacker to log into the infrastructur...

Oracle Virtualization: Input validation error vulnerability

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. The product is used to unify the management of the entire hardware and software system from the application to the disk, can be virtualized from the...

Oracle Enterprise Manager Base Platform: Input validation error vulnerability

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. The product is used to unify the management of the entire hardware and software system from the application to the disk, can be virtualized from the...

Oracle Virtualization: Input validation error vulnerability

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation. Oracle VM VirtualBox is a virtual machine management software for Oracle Virtualization. VirtualBox is vulnerable to an input validation error that allows a low privilege attacker to log into the infrastructur...

EulerOS Virtualization 2.10.0 : squashfs-tools (EulerOS-SA-2022-1414)

According to the versions of the squashfs-tools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than...

EulerOS Virtualization 2.10.1 : gmp (EulerOS-SA-2022-1372)

According to the versions of the gmp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via...

EulerOS Virtualization 2.10.1 : cups (EulerOS-SA-2022-1369)

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update...