High WID-SEC-2023-1026 11 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Apr 18, 2023 · Updated Apr 18, 2023 · de-DE

Vendor: Oracle Product: Virtualization Product: Virtualization < 6.1.44 Product: Virtualization < 7.0.8 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 11

High 8.2

CVE-2023-21990

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
High 7.8

CVE-2023-21987 Public exploit

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
High 7.5

CVE-2022-42916

In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, cur…

curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi

Oct 29, 2022
Medium 6.0

CVE-2023-21989

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Medium 6.0

CVE-2023-22002

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Medium 4.6

CVE-2023-21998

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Medium 4.6

CVE-2023-22000

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Medium 4.6

CVE-2023-22001

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Low 3.8

CVE-2023-21988

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Low 3.6

CVE-2023-21999

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023
Low 3.2

CVE-2023-21991

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 18, 2023

Revision history

2023-04-18 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2023 - Appendix Oracle Virtualization vom 2023-04-18
https://www.oracle.com/security-alerts/cpuapr2023.html#AppendixOVIR