Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Mageia 8 MGASA-2022-0265 Critical: VirtualBox Exploits Resolved

mageia
Calendar Grey July 25, 2022
Dist Mageia Esm H88
The recent update for Oracle VM VirtualBox addresses security vulnerabilities identified as CVE-2022-21554 and CVE-2022-21571, enhancing protection for users.
This update provides the upstream 6.1.36 maintenance release that fixes at least the following security vulnerabilities: A vulnerability in the Oracle VM VirtualBox prior to 6.1.3...

Summary

This update provides the upstream 6.1.36 maintenance release that fixes at least the following security vulnerabilities:
A vulnerability in the Oracle VM VirtualBox prior to 6.1.36 contains an easily exploitable vulnerability that allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox (CVE-2022-21554).
A vulnerability in the Oracle VM VirtualBox prior to 6.1.36 contains an easily exploitable vulnerability that allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vul...

Read the Full Advisory

References

- https://bugs.mageia.org/show_bug.cgi?id=30657

- https://www.oracle.com/security-alerts/cpujul2022.html#AppendixOVIR

-

- https://www.cve.org/CVERecord?id=CVE-2022-21554

- https://www.cve.org/CVERecord?id=CVE-2022-21571

Topics%20covered

Topics Covered

security advisory critical software update exploit fix virtualbox Mageia

Resolution

SRPMS

- 8/core/virtualbox-6.1.36-1.mga8

- 8/core/kmod-virtualbox-6.1.36-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Jul 2022
URL: https://advisories.mageia.org/MGASA-2022-0265.html
Type: security
CVE: CVE-2022-21554, CVE-2022-21571

Topics%20covered

Topics Covered

security advisory critical software update exploit fix virtualbox Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here