PT-2022-5653 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.40 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with network access via VRDP to compromise...

Oracle Virtualization和Oracle VM VirtualBox 安全漏洞

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

CVE-2022-39426

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

Oracle Virtualization和Oracle VM VirtualBox 安全漏洞

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

PT-2022-5337 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.40 Description: The issue is related to a double free memory error when handling smart card input/output messages in the Core component of Oracle VM VirtualBox. This can be exploited by a remote...

CVE-2022-39425

CVE-2022-39425 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability can be exploited remotely over VRDP by an unauthenticated attacker, potentially leading to takeover of VirtualBox and impacting confidentiality, integrity, and availability. Public disclosures in connected sourc...

Oracle Virtualization和Oracle VM VirtualBox 安全漏洞

Oracle VM VirtualBox is a virtual machine management software from Oracle. A security vulnerability exists in Oracle VM VirtualBox component: Core versions prior to 6.1.40. An attacker can exploit this vulnerability to compromise Oracle VM VirtualBox, which could cause Oracle VM VirtualBox to han...

CVE-2022-21621

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39426

CVE-2022-39426 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability allows an unauthenticated attacker with network access via VRDP to compromise VirtualBox, potentially taking over the host. Affected version range is before 6.1.40; remediation is to upgrade to 6.1.40 or later (...

CVE-2022-39422

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...

CVE-2022-39423

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21620

CVE-2022-21620 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The advisory describes a high-privilege, local attack where an authenticated/logged-in attacker can compromise VirtualBox, potentially taking over the product (scope change may impact other Oracle Virtualization components). Miti...

CVE-2022-39427

CVE-2022-39427 affects Oracle VM VirtualBox before 6.1.40 (Core) on Windows. The root cause is a vulnerability in VirtualBox Core allowing a low-privilege, local attacker with logon to compromise the host, with impact on confidentiality, integrity, and availability (taken over the VirtualBox). Th...

OPENSUSE-SU-2022:10152-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to 6.1.38r86 released by Oracle September 02 2022 This is a maintenance release. The following items were fixed and/or added: - GUI: Improvements in Native Language Support area - Main: OVF Export: Added support for exporting V...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2022:10152-1 Rating: important References: 1201720 1203086 1203306 1203370 1203735 1204019 Cross-References: CVE-2022-21554 CVE-2022-21571 CVSS scores: CVE-2022-21554 NVD : 4.4...

openSUSE 15 Security Update : virtualbox (openSUSE-SU-2022:10129-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10129-1 advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2022:10129-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2022:10129-1 Security update for virtualbox

This update for virtualbox fixes the following issues: Version bump to 6.1.38r86 released by Oracle September 02 2022 This is a maintenance release. The following items were fixed and/or added: - GUI: Improvements in Native Language Support area - Main: OVF Export: Added support for exporting VMs...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2022:10129-1 Rating: important References: 1201720 1203086 1203306 1203370 Cross-References: CVE-2022-21554 CVE-2022-21571 CVSS scores: CVE-2022-21554 NVD : 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2022:10122-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...