High WID-SEC-2023-0118 6 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Jan 17, 2023 · Updated Oct 8, 2023 · Revision 2 · de-DE

Vendor: gentoo Vendor: Oracle Product: Linux Product: Virtualization Product: Virtualization < 6.1.42 Product: Virtualization < 7.0.6 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 6

High 8.1

CVE-2023-21886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 17, 2023
Medium 5.5

CVE-2023-21898

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 17, 2023
Medium 5.5

CVE-2023-21899

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 17, 2023
Medium 4.4

CVE-2023-21884

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 17, 2023
Low 3.8

CVE-2023-21885

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 17, 2023
Low 3.8

CVE-2023-21889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 17, 2023

Revision history

2023-10-08 #2
Neue Updates von Gentoo aufgenommen
2023-01-17 #1
Initiale Fassung

References

Gentoo Linux Security Advisory GLSA-202310-07 vom 2023-10-08
https://security.gentoo.org/glsa/202310-07
Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle Virtualization vom 2023-01-17
https://www.oracle.com/security-alerts/cpujan2023.html#AppendixOVIR