Critical WID-SEC-2024-0886 13 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Apr 16, 2024 · Updated May 11, 2025 · Revision 2 · de-DE

Vendor: Oracle Product: Virtualization Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 13

High 8.8

CVE-2024-21112

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 8.8

CVE-2024-21113

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 8.8

CVE-2024-21114

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 8.8

CVE-2024-21115

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 7.8

CVE-2024-21103

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 7.8

CVE-2024-21111 Public exploit

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 7.8

CVE-2024-21116

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
High 7.3

CVE-2024-21110

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
Medium 6.7

CVE-2024-21107 Public exploit

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
Medium 6.5

CVE-2024-21106

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
Medium 6.5

CVE-2024-21121

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
Medium 5.9

CVE-2024-21109

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024
Low 3.3

CVE-2024-21108

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 16, 2024

Revision history

2025-05-11 #2
Exploit aufgenommen
2024-04-16 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2024 - Appendix Oracle Virtualization vom 2024-04-16
https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixOVIR
Exploit DB vom 2025-05-11
https://www.exploit-db.com/exploits/52287