Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-22098 (GCVE-0-2023-22098)
Vulnerability from cvelistv5
- Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox.
► | URL | Tags | |||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
|
Vendor | Product | Version | ||
---|---|---|---|---|
Oracle Corporation | VM VirtualBox |
Version: * < 7.0.12 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T09:59:29.042Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "Oracle Advisory", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "VM VirtualBox", "vendor": "Oracle Corporation", "versions": [ { "lessThan": "7.0.12", "status": "affected", "version": "*", "versionType": "custom" } ] } ], "descriptions": [ { "lang": "en-US", "value": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "description": "Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox.", "lang": "en-US" } ] } ], "providerMetadata": { "dateUpdated": "2023-12-13T14:19:21.610Z", "orgId": "43595867-4340-4103-b7a2-9a5208d29a85", "shortName": "oracle" }, "references": [ { "name": "Oracle Advisory", "tags": [ "vendor-advisory" ], "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ] } }, "cveMetadata": { "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "assignerShortName": "oracle", "cveId": "CVE-2023-22098", "datePublished": "2023-10-17T21:03:03.760Z", "dateReserved": "2022-12-17T19:26:00.761Z", "dateUpdated": "2024-08-02T09:59:29.042Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-22098\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2023-10-17T22:15:14.813\",\"lastModified\":\"2024-11-21T07:44:16.307\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a la 7.0.12. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante con altos privilegios iniciar sesi\u00f3n en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Si bien la vulnerabilidad est\u00e1 en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) de Oracle VM VirtualBox, as\u00ed como acceso no autorizado a actualizaciones, inserci\u00f3n o eliminaci\u00f3n de algunos de los datos accesibles de Oracle VM VirtualBox y acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox. Nota: Solo aplicable a la plataforma 7.0.x. CVSS 3.1 Puntuaci\u00f3n base 7.3 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert_us@oracle.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.12\",\"matchCriteriaId\":\"D8A5BD79-BD2B-483D-B14F-0F2E525E56D6\"}]}]}],\"references\":[{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2023.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2023.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}" } }
ghsa-gh29-4rpr-2898
Vulnerability from github
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).
{ "affected": [], "aliases": [ "CVE-2023-22098" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-10-17T22:15:14Z", "severity": "HIGH" }, "details": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).", "id": "GHSA-gh29-4rpr-2898", "modified": "2023-12-13T15:30:54Z", "published": "2023-10-18T00:31:42Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22098" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "type": "CVSS_V3" } ] }
opensuse-su-2024:13355-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "python3-virtualbox-7.0.12-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the python3-virtualbox-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-13355", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13355-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22098 page", "url": "https://www.suse.com/security/cve/CVE-2023-22098/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22099 page", "url": "https://www.suse.com/security/cve/CVE-2023-22099/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22100 page", "url": "https://www.suse.com/security/cve/CVE-2023-22100/" } ], "title": "python3-virtualbox-7.0.12-1.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:13355-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "python3-virtualbox-7.0.12-1.1.aarch64", "product": { "name": "python3-virtualbox-7.0.12-1.1.aarch64", "product_id": "python3-virtualbox-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-7.0.12-1.1.aarch64", "product_id": "virtualbox-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-devel-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-devel-7.0.12-1.1.aarch64", "product_id": "virtualbox-devel-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "product_id": "virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-guest-source-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-guest-source-7.0.12-1.1.aarch64", "product_id": "virtualbox-guest-source-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-guest-tools-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-guest-tools-7.0.12-1.1.aarch64", "product_id": "virtualbox-guest-tools-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-host-source-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-host-source-7.0.12-1.1.aarch64", "product_id": "virtualbox-host-source-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-qt-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-qt-7.0.12-1.1.aarch64", "product_id": "virtualbox-qt-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-vnc-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-vnc-7.0.12-1.1.aarch64", "product_id": "virtualbox-vnc-7.0.12-1.1.aarch64" } }, { "category": "product_version", "name": "virtualbox-websrv-7.0.12-1.1.aarch64", "product": { "name": "virtualbox-websrv-7.0.12-1.1.aarch64", "product_id": "virtualbox-websrv-7.0.12-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "python3-virtualbox-7.0.12-1.1.ppc64le", "product": { "name": "python3-virtualbox-7.0.12-1.1.ppc64le", "product_id": "python3-virtualbox-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-7.0.12-1.1.ppc64le", "product_id": "virtualbox-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-devel-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-devel-7.0.12-1.1.ppc64le", "product_id": "virtualbox-devel-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "product_id": "virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-guest-source-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-guest-source-7.0.12-1.1.ppc64le", "product_id": "virtualbox-guest-source-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-guest-tools-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-guest-tools-7.0.12-1.1.ppc64le", "product_id": "virtualbox-guest-tools-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-host-source-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-host-source-7.0.12-1.1.ppc64le", "product_id": "virtualbox-host-source-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-qt-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-qt-7.0.12-1.1.ppc64le", "product_id": "virtualbox-qt-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-vnc-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-vnc-7.0.12-1.1.ppc64le", "product_id": "virtualbox-vnc-7.0.12-1.1.ppc64le" } }, { "category": "product_version", "name": "virtualbox-websrv-7.0.12-1.1.ppc64le", "product": { "name": "virtualbox-websrv-7.0.12-1.1.ppc64le", "product_id": "virtualbox-websrv-7.0.12-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python3-virtualbox-7.0.12-1.1.s390x", "product": { "name": "python3-virtualbox-7.0.12-1.1.s390x", "product_id": "python3-virtualbox-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-7.0.12-1.1.s390x", "product": { "name": "virtualbox-7.0.12-1.1.s390x", "product_id": "virtualbox-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-devel-7.0.12-1.1.s390x", "product": { "name": "virtualbox-devel-7.0.12-1.1.s390x", "product_id": "virtualbox-devel-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "product": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "product_id": "virtualbox-guest-desktop-icons-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-guest-source-7.0.12-1.1.s390x", "product": { "name": "virtualbox-guest-source-7.0.12-1.1.s390x", "product_id": "virtualbox-guest-source-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-guest-tools-7.0.12-1.1.s390x", "product": { "name": "virtualbox-guest-tools-7.0.12-1.1.s390x", "product_id": "virtualbox-guest-tools-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-host-source-7.0.12-1.1.s390x", "product": { "name": "virtualbox-host-source-7.0.12-1.1.s390x", "product_id": "virtualbox-host-source-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-qt-7.0.12-1.1.s390x", "product": { "name": "virtualbox-qt-7.0.12-1.1.s390x", "product_id": "virtualbox-qt-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-vnc-7.0.12-1.1.s390x", "product": { "name": "virtualbox-vnc-7.0.12-1.1.s390x", "product_id": "virtualbox-vnc-7.0.12-1.1.s390x" } }, { "category": "product_version", "name": "virtualbox-websrv-7.0.12-1.1.s390x", "product": { "name": "virtualbox-websrv-7.0.12-1.1.s390x", "product_id": "virtualbox-websrv-7.0.12-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "python3-virtualbox-7.0.12-1.1.x86_64", "product": { "name": "python3-virtualbox-7.0.12-1.1.x86_64", "product_id": "python3-virtualbox-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-7.0.12-1.1.x86_64", "product_id": "virtualbox-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-devel-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-devel-7.0.12-1.1.x86_64", "product_id": "virtualbox-devel-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "product_id": "virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-guest-source-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-guest-source-7.0.12-1.1.x86_64", "product_id": "virtualbox-guest-source-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-guest-tools-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-guest-tools-7.0.12-1.1.x86_64", "product_id": "virtualbox-guest-tools-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-host-source-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-host-source-7.0.12-1.1.x86_64", "product_id": "virtualbox-host-source-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-qt-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-qt-7.0.12-1.1.x86_64", "product_id": "virtualbox-qt-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-vnc-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-vnc-7.0.12-1.1.x86_64", "product_id": "virtualbox-vnc-7.0.12-1.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-websrv-7.0.12-1.1.x86_64", "product": { "name": "virtualbox-websrv-7.0.12-1.1.x86_64", "product_id": "virtualbox-websrv-7.0.12-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python3-virtualbox-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64" }, "product_reference": "python3-virtualbox-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "python3-virtualbox-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le" }, "product_reference": "python3-virtualbox-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "python3-virtualbox-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x" }, "product_reference": "python3-virtualbox-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "python3-virtualbox-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64" }, "product_reference": "python3-virtualbox-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-devel-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-devel-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-devel-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-devel-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-devel-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-devel-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-devel-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-devel-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-source-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-guest-source-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-source-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-guest-source-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-source-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-guest-source-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-source-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-guest-source-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-tools-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-guest-tools-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-tools-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-guest-tools-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-tools-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-guest-tools-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-tools-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-guest-tools-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-host-source-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-host-source-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-host-source-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-host-source-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-host-source-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-host-source-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-host-source-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-host-source-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-qt-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-qt-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-qt-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-qt-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-qt-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-qt-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-qt-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-qt-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-vnc-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-vnc-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-vnc-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-vnc-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-vnc-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-vnc-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-vnc-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-vnc-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-websrv-7.0.12-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64" }, "product_reference": "virtualbox-websrv-7.0.12-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-websrv-7.0.12-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le" }, "product_reference": "virtualbox-websrv-7.0.12-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-websrv-7.0.12-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x" }, "product_reference": "virtualbox-websrv-7.0.12-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-websrv-7.0.12-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" }, "product_reference": "virtualbox-websrv-7.0.12-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22098", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22098" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22098", "url": "https://www.suse.com/security/cve/CVE-2023-22098" }, { "category": "external", "summary": "SUSE Bug 1216363 for CVE-2023-22098", "url": "https://bugzilla.suse.com/1216363" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2023-22098" }, { "cve": "CVE-2023-22099", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22099" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22099", "url": "https://www.suse.com/security/cve/CVE-2023-22099" }, { "category": "external", "summary": "SUSE Bug 1216364 for CVE-2023-22099", "url": "https://bugzilla.suse.com/1216364" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2023-22099" }, { "cve": "CVE-2023-22100", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22100" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22100", "url": "https://www.suse.com/security/cve/CVE-2023-22100" }, { "category": "external", "summary": "SUSE Bug 1216365 for CVE-2023-22100", "url": "https://bugzilla.suse.com/1216365" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:python3-virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-devel-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-desktop-icons-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-guest-tools-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-host-source-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-qt-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-vnc-7.0.12-1.1.x86_64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.aarch64", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.ppc64le", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.s390x", "openSUSE Tumbleweed:virtualbox-websrv-7.0.12-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2023-22100" } ] }
opensuse-su-2023:0352-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for virtualbox", "title": "Title of the patch" }, { "category": "description", "text": "This update for virtualbox fixes the following issues:\n\n- Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle)\n\n Fixes the following:\n - CVE-2023-22098 (boo#1216363)\n - CVE-2023-22099 (boo#1216364)\n - CVE-2023-22100 (boo#1216365)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- VMM: Fixed using a debugger inside the guest under certain circumstances (bugs #21413 and #21546)\n- VMM: Fixed detection of VT-x being used by other hypervisors (bug #21867)\n- VMM: Introduced additional improvements in Split Lock Detection feature of recent Intel CPUs on Linux hosts (bug #20180)\n- GUI: Fixed issue when the nested hardware virtualization setting was not displayed in the VM details panel (bug #21707)\n- GUI: Introduced NLS update for Croatian, Indonesian, Italian, Japanese, Korean, Dutch and Turkish languages as well as added general look-and-feel improvements\n- Devices: Fixed black screen in Windows guests with multiple guest screens when 3D is disabled (7.0.10 regression)\n- Devices: Fixed PCI device identifiers for the VirtIO network interface (bug #21516)\n- Devices: Fixed VLAN support for the VirtIO network interface (bug #21778)\n- Devices: Fixed loading saved states when a TPM is configured (7.0.10 regression, bug #21773)\n- Networking: Fixed memory leaks in the VBoxIntNetSwitch process on macOS (bug #21752)\n- Networking: Fixed TCP connections with IP addresses ending on .2 when the NAT network attachment is used (bug #21513)\n- VRDP: Added general improvements\n- VBoxManage: Added improvements for \u0027list usbfilters\u0027 command\n- Unattended: Added kick start file support for Oracle Linux 8 and Oracle Linux 9.\n- Main: Added more Linux OS subtypes\n- Host Services: Fixed Guest Properties service crash under rare circumstance\n- Linux Host and Guest: Fixed few \u0027field-spanning write\u0027 kernel warnings (bugs #21410 and #21862)\n- Linux Guest Additions: Added more fixes for RHEL 8.9 and 9.3 kernel\n- Linux Guest Additions: Added more fixes for kernel 6.4\n- Linux Guest Additions: Added initial support for OpenSUSE 15.5 kernel\n- Linux Guest Additions: Added initial support for kernels 6.5 and 6.6\n- Linux Guest Additions: Added version reporting for \u0027rcvboxadd status-kernel\u0027 and \u0027rcvboxadd status-user\u0027 commands\n- BIOS: Restored support for ISA SCSI HBAs in the BIOS (bug #21736)\n\n- Convert to systemd-sysusers\n\n- Fix problems with 6.5 kernels and shared folders. (boo#1215463).\n", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2023-352", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2023_0352-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2023:0352-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SUZKE6ZA5IISV77TNIUMUZMZFQSXYHQ7/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2023:0352-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SUZKE6ZA5IISV77TNIUMUZMZFQSXYHQ7/" }, { "category": "self", "summary": "SUSE Bug 1215463", "url": "https://bugzilla.suse.com/1215463" }, { "category": "self", "summary": "SUSE Bug 1216363", "url": "https://bugzilla.suse.com/1216363" }, { "category": "self", "summary": "SUSE Bug 1216364", "url": "https://bugzilla.suse.com/1216364" }, { "category": "self", "summary": "SUSE Bug 1216365", "url": "https://bugzilla.suse.com/1216365" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22098 page", "url": "https://www.suse.com/security/cve/CVE-2023-22098/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22099 page", "url": "https://www.suse.com/security/cve/CVE-2023-22099/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22100 page", "url": "https://www.suse.com/security/cve/CVE-2023-22100/" } ], "title": "Security update for virtualbox", "tracking": { "current_release_date": "2023-11-04T08:59:57Z", "generator": { "date": "2023-11-04T08:59:57Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2023:0352-1", "initial_release_date": "2023-11-04T08:59:57Z", "revision_history": [ { "date": "2023-11-04T08:59:57Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "product": { "name": "virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "product_id": "virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch" } }, { "category": "product_version", "name": "virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "product": { "name": "virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "product_id": "virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch" } }, { "category": "product_version", "name": "virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "product": { "name": "virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "product_id": "virtualbox-host-source-7.0.12-lp155.2.13.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "product_id": "python3-virtualbox-7.0.12-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-7.0.12-lp155.2.13.1.x86_64", "product_id": "virtualbox-7.0.12-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "product_id": "virtualbox-devel-7.0.12-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "product_id": "virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "product_id": "virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "product_id": "virtualbox-qt-7.0.12-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "product_id": "virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64", "product": { "name": "virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64", "product_id": "virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python3-virtualbox-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-devel-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch" }, "product_reference": "virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch" }, "product_reference": "virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-host-source-7.0.12-lp155.2.13.1.noarch as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch" }, "product_reference": "virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-qt-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" }, "product_reference": "virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22098", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22098" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22098", "url": "https://www.suse.com/security/cve/CVE-2023-22098" }, { "category": "external", "summary": "SUSE Bug 1216363 for CVE-2023-22098", "url": "https://bugzilla.suse.com/1216363" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-11-04T08:59:57Z", "details": "important" } ], "title": "CVE-2023-22098" }, { "cve": "CVE-2023-22099", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22099" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22099", "url": "https://www.suse.com/security/cve/CVE-2023-22099" }, { "category": "external", "summary": "SUSE Bug 1216364 for CVE-2023-22099", "url": "https://bugzilla.suse.com/1216364" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-11-04T08:59:57Z", "details": "important" } ], "title": "CVE-2023-22099" }, { "cve": "CVE-2023-22100", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22100" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22100", "url": "https://www.suse.com/security/cve/CVE-2023-22100" }, { "category": "external", "summary": "SUSE Bug 1216365 for CVE-2023-22100", "url": "https://bugzilla.suse.com/1216365" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.5:python3-virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-devel-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-guest-desktop-icons-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-guest-tools-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-host-source-7.0.12-lp155.2.13.1.noarch", "openSUSE Leap 15.5:virtualbox-kmp-default-7.0.12_k5.14.21_150500.55.31-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-qt-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-vnc-7.0.12-lp155.2.13.1.x86_64", "openSUSE Leap 15.5:virtualbox-websrv-7.0.12-lp155.2.13.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-11-04T08:59:57Z", "details": "important" } ], "title": "CVE-2023-22100" } ] }
opensuse-su-2023:0351-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for virtualbox", "title": "Title of the patch" }, { "category": "description", "text": "This update for virtualbox fixes the following issues:\n\n- Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle)\n\n Fixes the following:\n - CVE-2023-22098 (boo#1216363)\n - CVE-2023-22099 (boo#1216364)\n - CVE-2023-22100 (boo#1216365)\n\nThis is a maintenance release. The following items were fixed and/or added:\n\n- VMM: Fixed using a debugger inside the guest under certain circumstances (bugs #21413 and #21546)\n- VMM: Fixed detection of VT-x being used by other hypervisors (bug #21867)\n- VMM: Introduced additional improvements in Split Lock Detection feature of recent Intel CPUs on Linux hosts (bug #20180)\n- GUI: Fixed issue when the nested hardware virtualization setting was not displayed in the VM details panel (bug #21707)\n- GUI: Introduced NLS update for Croatian, Indonesian, Italian, Japanese, Korean, Dutch and Turkish languages as well as added general look-and-feel improvements\n- Devices: Fixed black screen in Windows guests with multiple guest screens when 3D is disabled (7.0.10 regression)\n- Devices: Fixed PCI device identifiers for the VirtIO network interface (bug #21516)\n- Devices: Fixed VLAN support for the VirtIO network interface (bug #21778)\n- Devices: Fixed loading saved states when a TPM is configured (7.0.10 regression, bug #21773)\n- Networking: Fixed memory leaks in the VBoxIntNetSwitch process on macOS (bug #21752)\n- Networking: Fixed TCP connections with IP addresses ending on .2 when the NAT network attachment is used (bug #21513)\n- VRDP: Added general improvements\n- VBoxManage: Added improvements for \u0027list usbfilters\u0027 command\n- Unattended: Added kick start file support for Oracle Linux 8 and Oracle Linux 9.\n- Main: Added more Linux OS subtypes\n- Host Services: Fixed Guest Properties service crash under rare circumstance\n- Linux Host and Guest: Fixed few \u0027field-spanning write\u0027 kernel warnings (bugs #21410 and #21862)\n- Linux Guest Additions: Added more fixes for RHEL 8.9 and 9.3 kernel\n- Linux Guest Additions: Added more fixes for kernel 6.4\n- Linux Guest Additions: Added initial support for OpenSUSE 15.5 kernel\n- Linux Guest Additions: Added initial support for kernels 6.5 and 6.6\n- Linux Guest Additions: Added version reporting for \u0027rcvboxadd status-kernel\u0027 and \u0027rcvboxadd status-user\u0027 commands\n- BIOS: Restored support for ISA SCSI HBAs in the BIOS (bug #21736)\n\n- Convert to systemd-sysusers\n", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2023-351", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2023_0351-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2023:0351-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XMZ3YIKSP2NRCTNSEI3YU3MKDLRBOPRF/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2023:0351-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XMZ3YIKSP2NRCTNSEI3YU3MKDLRBOPRF/" }, { "category": "self", "summary": "SUSE Bug 1216363", "url": "https://bugzilla.suse.com/1216363" }, { "category": "self", "summary": "SUSE Bug 1216364", "url": "https://bugzilla.suse.com/1216364" }, { "category": "self", "summary": "SUSE Bug 1216365", "url": "https://bugzilla.suse.com/1216365" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22098 page", "url": "https://www.suse.com/security/cve/CVE-2023-22098/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22099 page", "url": "https://www.suse.com/security/cve/CVE-2023-22099/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-22100 page", "url": "https://www.suse.com/security/cve/CVE-2023-22100/" } ], "title": "Security update for virtualbox", "tracking": { "current_release_date": "2023-11-04T08:59:52Z", "generator": { "date": "2023-11-04T08:59:52Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2023:0351-1", "initial_release_date": "2023-11-04T08:59:52Z", "revision_history": [ { "date": "2023-11-04T08:59:52Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "product": { "name": "virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "product_id": "virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch" } }, { "category": "product_version", "name": "virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "product": { "name": "virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "product_id": "virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch" } }, { "category": "product_version", "name": "virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "product": { "name": "virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "product_id": "virtualbox-host-source-7.0.12-lp154.2.43.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "product_id": "python3-virtualbox-7.0.12-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-7.0.12-lp154.2.43.1.x86_64", "product_id": "virtualbox-7.0.12-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "product_id": "virtualbox-devel-7.0.12-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "product_id": "virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "product_id": "virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "product_id": "virtualbox-qt-7.0.12-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "product_id": "virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64" } }, { "category": "product_version", "name": "virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64", "product": { "name": "virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64", "product_id": "virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.4", "product": { "name": "openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.4" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python3-virtualbox-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-devel-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch" }, "product_reference": "virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch" }, "product_reference": "virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-host-source-7.0.12-lp154.2.43.1.noarch as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch" }, "product_reference": "virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-qt-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" }, { "category": "default_component_of", "full_product_name": { "name": "virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64 as component of openSUSE Leap 15.4", "product_id": "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" }, "product_reference": "virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22098", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22098" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22098", "url": "https://www.suse.com/security/cve/CVE-2023-22098" }, { "category": "external", "summary": "SUSE Bug 1216363 for CVE-2023-22098", "url": "https://bugzilla.suse.com/1216363" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-11-04T08:59:52Z", "details": "important" } ], "title": "CVE-2023-22098" }, { "cve": "CVE-2023-22099", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22099" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22099", "url": "https://www.suse.com/security/cve/CVE-2023-22099" }, { "category": "external", "summary": "SUSE Bug 1216364 for CVE-2023-22099", "url": "https://bugzilla.suse.com/1216364" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-11-04T08:59:52Z", "details": "important" } ], "title": "CVE-2023-22099" }, { "cve": "CVE-2023-22100", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-22100" } ], "notes": [ { "category": "general", "text": "unknown", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-22100", "url": "https://www.suse.com/security/cve/CVE-2023-22100" }, { "category": "external", "summary": "SUSE Bug 1216365 for CVE-2023-22100", "url": "https://bugzilla.suse.com/1216365" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.4:python3-virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-devel-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-guest-desktop-icons-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-guest-tools-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-host-source-7.0.12-lp154.2.43.1.noarch", "openSUSE Leap 15.4:virtualbox-kmp-default-7.0.12_k5.14.21_150400.24.92-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-qt-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-vnc-7.0.12-lp154.2.43.1.x86_64", "openSUSE Leap 15.4:virtualbox-websrv-7.0.12-lp154.2.43.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2023-11-04T08:59:52Z", "details": "important" } ], "title": "CVE-2023-22100" } ] }
wid-sec-w-2023-2683
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Oracle Virtualization ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Linux\n- MacOS X\n- Windows\n- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2683 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2683.json" }, { "category": "self", "summary": "WID-SEC-2023-2683 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2683" }, { "category": "external", "summary": "Oracle Critical Patch Update Advisory - October 2023 - Appendix Oracle Virtualization vom 2023-10-17", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixOVIR" } ], "source_lang": "en-US", "title": "Oracle Virtualization: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-10-17T22:00:00.000+00:00", "generator": { "date": "2024-08-15T18:00:02.800+00:00", "engine": { "name": "BSI-WID", "version": "1.3.5" } }, "id": "WID-SEC-W-2023-2683", "initial_release_date": "2023-10-17T22:00:00.000+00:00", "revision_history": [ { "date": "2023-10-17T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Virtualization \u003c 7.0.12", "product": { "name": "Oracle Virtualization \u003c 7.0.12", "product_id": "T030629", "product_identification_helper": { "cpe": "cpe:/a:oracle:virtualization:7.0.12" } } } ], "category": "vendor", "name": "Oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22100", "notes": [ { "category": "description", "text": "In Oracle Virtualization existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein lokaler Angreifer mit bestimmten Berechtigungen die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\" und \"Availability\", sowie \"LOW\" f\u00fcr \"Integrity\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL-HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "release_date": "2023-10-17T22:00:00.000+00:00", "title": "CVE-2023-22100" }, { "cve": "CVE-2023-22099", "notes": [ { "category": "description", "text": "In Oracle Virtualization existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein lokaler Angreifer mit bestimmten Berechtigungen die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\" und \"Availability\", sowie \"LOW\" f\u00fcr \"Integrity\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL-HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "release_date": "2023-10-17T22:00:00.000+00:00", "title": "CVE-2023-22099" }, { "cve": "CVE-2023-22098", "notes": [ { "category": "description", "text": "In Oracle Virtualization existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein lokaler Angreifer mit bestimmten Berechtigungen die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\" und \"Availability\", sowie \"LOW\" f\u00fcr \"Integrity\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"MITTEL-HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "release_date": "2023-10-17T22:00:00.000+00:00", "title": "CVE-2023-22098" } ] }
gsd-2023-22098
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2023-22098", "id": "GSD-2023-22098" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-22098" ], "details": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H).", "id": "GSD-2023-22098", "modified": "2023-12-13T01:20:43.485918Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2023-22098", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "VM VirtualBox", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "*", "version_value": "7.0.12" } ] } } ] }, "vendor_name": "Oracle Corporation" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)." } ] }, "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox." } ] } ] }, "references": { "reference_data": [ { "name": "https://www.oracle.com/security-alerts/cpuoct2023.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ] } }, "nvd.nist.gov": { "cve": { "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8A5BD79-BD2B-483D-B14F-0F2E525E56D6", "versionEndExcluding": "7.0.12", "versionStartIncluding": "7.0.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "descriptions": [ { "lang": "en", "value": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)." }, { "lang": "es", "value": "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a la 7.0.12. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante con altos privilegios iniciar sesi\u00f3n en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Si bien la vulnerabilidad est\u00e1 en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) de Oracle VM VirtualBox, as\u00ed como acceso no autorizado a actualizaciones, inserci\u00f3n o eliminaci\u00f3n de algunos de los datos accesibles de Oracle VM VirtualBox y acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox. Nota: Solo aplicable a la plataforma 7.0.x. CVSS 3.1 Puntuaci\u00f3n base 7.3 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)." } ], "id": "CVE-2023-22098", "lastModified": "2023-12-13T15:15:07.547", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "secalert_us@oracle.com", "type": "Primary" } ] }, "published": "2023-10-17T22:15:14.813", "references": [ { "source": "secalert_us@oracle.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "sourceIdentifier": "secalert_us@oracle.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } } } }
fkie_cve-2023-22098
Vulnerability from fkie_nvd
▶ | URL | Tags | |
---|---|---|---|
secalert_us@oracle.com | https://www.oracle.com/security-alerts/cpuoct2023.html | Patch, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.oracle.com/security-alerts/cpuoct2023.html | Patch, Vendor Advisory |
Vendor | Product | Version | |
---|---|---|---|
oracle | vm_virtualbox | * |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8A5BD79-BD2B-483D-B14F-0F2E525E56D6", "versionEndExcluding": "7.0.12", "versionStartIncluding": "7.0.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)." }, { "lang": "es", "value": "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). Las versiones compatibles que se ven afectadas son anteriores a la 7.0.12. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante con altos privilegios iniciar sesi\u00f3n en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox. Si bien la vulnerabilidad est\u00e1 en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en una capacidad no autorizada para provocar un bloqueo o un bloqueo frecuente (DOS completo) de Oracle VM VirtualBox, as\u00ed como acceso no autorizado a actualizaciones, inserci\u00f3n o eliminaci\u00f3n de algunos de los datos accesibles de Oracle VM VirtualBox y acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox. Nota: Solo aplicable a la plataforma 7.0.x. CVSS 3.1 Puntuaci\u00f3n base 7.3 (impactos en la confidencialidad, la integridad y la disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H)." } ], "id": "CVE-2023-22098", "lastModified": "2024-11-21T07:44:16.307", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "secalert_us@oracle.com", "type": "Primary" } ] }, "published": "2023-10-17T22:15:14.813", "references": [ { "source": "secalert_us@oracle.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" } ], "sourceIdentifier": "secalert_us@oracle.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.