Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Mageia 8 Advisory: 2022-0153 Moderate: Oracle VM VirtualBox DoS Risks

mageia
Calendar Grey April 26, 2022
Dist Mageia Esm H88
Revised Fedora VirtualBox updates address vital vulnerabilities, maintaining system security with crucial patches implemented.
Updated virtualbox packages fix security vulnerabilities: Vulnerability in the Oracle VM VirtualBox prior to 6.1.34 contains an easily exploitable vulnerability that allows a high...

Summary

Updated virtualbox packages fix security vulnerabilities:
Vulnerability in the Oracle VM VirtualBox prior to 6.1.34 contains an easily exploitable vulnerability that allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data (CVE-2022-21465).
Vulnerability in the Oracle VM VirtualBox prior to 6.1.34 contains an easily exploitable vulnerability that allows a low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM V...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=30302

- https://https://www.virtualbox.org/wiki/Changelog#v34

- https://www.oracle.com/security-alerts/cpuapr2022.html#AppendixOVIR

- https://www.cve.org/CVERecord?id=CVE-2022-21465

- https://www.cve.org/CVERecord?id=CVE-2022-21471

- https://www.cve.org/CVERecord?id=CVE-2022-21487

- https://www.cve.org/CVERecord?id=CVE-2022-21488

Topics%20covered

Topics Covered

security advisory risk management system integrity dos mageia oracle vm

Resolution

SRPMS

- 8/core/virtualbox-6.1.34-1.2.mga8

- 8/core/kmod-virtualbox-6.1.34-1.2.mga8

Publication date: 26 Apr 2022
URL: https://advisories.mageia.org/MGASA-2022-0153.html
Type: security
CVE: CVE-2022-21465, CVE-2022-21471, CVE-2022-21487, CVE-2022-21488

Topics%20covered

Topics Covered

security advisory risk management system integrity dos mageia oracle vm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.