Medium WID-SEC-2024-3216 5 CVEs

Oracle Virtualization: Mehrere Schwachstellen

Published Oct 15, 2024 · Updated Nov 10, 2024 · Revision 3 · de-DE

Vendor: Oracle Vendor: SUSE Product: openSUSE Product: Virtualization Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 5

High 7.5

CVE-2024-21259

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 15, 2024
Medium 6.1

CVE-2024-21263

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 15, 2024
Medium 6.0

CVE-2024-21273

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 15, 2024
Medium 5.3

CVE-2024-21248

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 15, 2024
Low 2.3

CVE-2024-21253

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Oct 15, 2024

Revision history

2024-11-10 #3
Neue Updates von openSUSE aufgenommen
2024-10-20 #2
Neue Updates von openSUSE aufgenommen
2024-10-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2024 - Appendix Oracle Virtualization vom 2024-10-15
https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixOVIR
openSUSE Security Update OPENSUSE-SU-2024:14413-1 vom 2024-10-19
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VBTFJGZHK5BALTQRUU2XQTRI47WVY5AC/
openSUSE Security Update OPENSUSE-SU-2024:0364-1 vom 2024-11-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELCE6LNULD7SDN6FX3HW5773W3KTCWXS/