Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

Mageia Advisory 2022-0038: Critical Oracle VM VirtualBox Access Risk

mageia
Calendar Grey January 26, 2022
Scroller Mageia
Recent updates to VirtualBox in Mageia resolve a vulnerability that posed risks of unauthorized data access.
Updated virtualbox packages fix security vulnerability: Vulnerability in the Oracle VM VirtualBoxp rior to 6.1.32 contains an easily exploitable vulnerability allows low privileg...

Summary

Updated virtualbox packages fix security vulnerability:
Vulnerability in the Oracle VM VirtualBoxp rior to 6.1.32 contains an easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data (CVE-2022-21295).
For other fixes in this update, see the referenced changelog.

References

- https://bugs.mageia.org/show_bug.cgi?id=29918

- https://www.oracle.com/security-alerts/cpujan2022.html#AppendixOVIR

-

- https://www.cve.org/CVERecord?id=CVE-2022-21295

Topics%20covered

Topics Covered

security advisory unauthorized access critical package update Mageia Oracle VM VirtualBox exploitable issue

Resolution

SRPMS

- 8/core/virtualbox-6.1.32-1.mga8

- 8/core/kmod-virtualbox-6.1.32-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 26 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0038.html
Type: security
CVE: CVE-2022-21295

Topics%20covered

Topics Covered

security advisory unauthorized access critical package update Mageia Oracle VM VirtualBox exploitable issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.