High WID-SEC-2022-1783 10 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Oct 18, 2022 · Updated Dec 18, 2022 · Revision 2 · de-DE

Vendor: gentoo Vendor: Oracle Product: Linux Product: Virtualization Product: Virtualization < 6.1.38 Product: Virtualization < 6.1.40 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 10

High 8.8

CVE-2022-39427

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
High 8.1

CVE-2022-39424

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
High 8.1

CVE-2022-39425 Public exploit

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
High 8.1

CVE-2022-39426

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
High 7.5

CVE-2022-21620

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
High 7.5

CVE-2022-39422

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
High 7.3

CVE-2022-39421

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
Medium 6.0

CVE-2022-21621

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
Medium 6.0

CVE-2022-39423

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022
Medium 4.4

CVE-2022-21627

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 18, 2022

Revision history

2022-12-18 #2
Neue Updates von Gentoo aufgenommen
2022-10-18 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202212-03 vom 2022-12-19
https://security.gentoo.org/glsa/202212-03
Oracle Critical Patch Update Advisory - October 2022 - Appendix Oracle Virtualization vom 2022-10-18
https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixOVIR