High WID-SEC-2023-1781 4 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Jul 18, 2023 · Updated Jul 18, 2023 · de-DE

Vendor: Oracle Product: Virtualization Product: Virtualization < 6.1.46 Product: Virtualization < 7.0.10

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 4

High 8.1

CVE-2023-22018

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jul 18, 2023
High 7.5

CVE-2023-0464 Public exploit

Excessive Resource Usage Verifying X.509 Policy Constraints

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Mar 22, 2023
Medium 5.5

CVE-2023-22017

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jul 18, 2023
Medium 4.2

CVE-2023-22016

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jul 18, 2023

Revision history

2023-07-18 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2023 - Appendix Oracle Virtualization vom 2023-07-18
https://www.oracle.com/security-alerts/cpujul2023.html#AppendixOVIR