portage-ng / portage / app-emulation / virtualbox / 9999
portage-ng glsa
13 advisories reference app-emulation/virtualbox · none place version 9999 in a vulnerable range
▸ GLSA 202409-11 Oracle VirtualBox: Multiple Vulnerabilities this version unaffected normal remote 2024-09-22

Multiple vulnerabilities have been discovered in Oracle VirtualBox, the worst of which could lead to privilege escalation.

Announced
2024-09-22
Revised
2024-09-22
Access
remote
Bugs
#918524
Advisory
https://security.gentoo.org/glsa/202409-11

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 7.0.12>= 7.0.12

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in Oracle VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Oracle VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-7.0.12"

References

▸ GLSA 202310-07 Oracle VirtualBox: Multiple Vulnerabilities this version unaffected high remote 2023-10-08

Multiple vulnerabilities have been discovered in VirtualBox, leading to compomise of VirtualBox.

Announced
2023-10-08
Revised
2023-10-08
Access
remote
Bugs
#891327
Advisory
https://security.gentoo.org/glsa/202310-07

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 7.0.6, < 6.1.46>= 7.0.6, >= 6.1.46

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in Oracle VirtualBox, the worst of which may lead to VirtualBox compromise by an attacker with network access. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Oracle VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-7.0.6"

If you still need to use VirtualBox 6:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-6.1.46" "=app-emulation/virtualbox-6*"

References

▸ GLSA 202212-03 Oracle VirtualBox: Multiple Vulnerabilities this version unaffected high remote 2022-12-19

Multiple vulnerabilities have been discovered in Oracle Virtualbox, the worst of which could result in privilege escalation from a guest to the host.

Announced
2022-12-19
Revised
2022-12-19
Access
remote
Bugs
#877601
Advisory
https://security.gentoo.org/glsa/202212-03

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 6.1.40>= 6.1.40
app-emulation/virtualbox-modules*< 6.1.40>= 6.1.40

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in Oracle VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Oracle VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-6.1.40"

All Oracle VirtualBox modules users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-modules-6.1.40"

References

▸ GLSA 202208-36 Oracle VirtualBox: Multiple Vulnerabilities this version unaffected high remote 2022-08-31

Multiple vulnerabilities have been discovered in Oracle Virtualbox, the worst of which could result in root privilege escalation.

Announced
2022-08-31
Revised
2022-08-31
Access
remote
Bugs
#785445 #803134 #820425 #831440 #839990 #859391
Advisory
https://security.gentoo.org/glsa/202208-36

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 6.1.36>= 6.1.36
app-emulation/virtualbox-additions*< 6.1.36>= 6.1.36
app-emulation/virtualbox-extpack-oracle*< 6.1.36>= 6.1.36
app-emulation/virtualbox-guest-additions*< 6.1.36>= 6.1.36
app-emulation/virtualbox-modules*< 6.1.36>= 6.1.36

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-6.1.36"

References

▸ GLSA 202101-15 VirtualBox: Multiple vulnerabilities this version unaffected normal remote 2021-01-22

Multiple vulnerabilities have been found in VirtualBox, the worst of which could result in privilege escalation.

Announced
2021-01-22
Revised
2021-01-22
Access
remote
Bugs
#750782 #766348
Advisory
https://security.gentoo.org/glsa/202101-15

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 6.1.18>= 6.1.18

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-6.1.18"

References

▸ GLSA 202101-09 VirtualBox: Multiple vulnerabilities version not in range normal remote 2021-01-12

Multiple vulnerabilities have been found in VirtualBox, the worst of which could allow an attacker to take control of VirtualBox.

Announced
2021-01-12
Revised
2021-01-12
Access
remote
Bugs
#714064 #717626 #717782 #733924
Advisory
https://security.gentoo.org/glsa/202101-09

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 6.1.12>= 6.1.12:0/6.1, >= 6.0.24:0/6.0

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

An attacker could take control of VirtualBox resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, or other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All Virtualbox 6.0.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-6.0.24:0/6.0"

All Virtualbox 6.1.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-6.1.12:0/6.1"

References

▸ GLSA 202004-02 VirtualBox: Multiple vulnerabilities this version unaffected normal local, remote 2020-04-01

Multiple vulnerabilities have been found in VirtualBox, the worst of which could allow an attacker to take control of VirtualBox.

Announced
2020-04-01
Revised
2020-04-26 (revision 2)
Access
local, remote
Bugs
#714064
Advisory
https://security.gentoo.org/glsa/202004-02

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 5.2.36>= 5.2.36
app-emulation/virtualbox-bin*< 5.2.36>= 5.2.36

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

An attacker could take control of VirtualBox resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, or other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox 5.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-5.2.36"

All VirtualBox 6.0.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-6.0.16"

All VirtualBox 6.1.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-6.1.2"

All VirtualBox binary 5.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-5.2.36"

All VirtualBox binary 6.0.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-6.0.16"

All VirtualBox binary 6.1.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-6.1.2"

References

▸ GLSA 201805-08 VirtualBox: Multiple vulnerabilities this version unaffected normal remote 2018-05-22

Multiple vulnerabilities have been found in VirtualBox, the worst of which could allow an attacker to take control of VirtualBox.

Announced
2018-05-22
Revised
2018-05-22
Access
remote
Bugs
#655186
Advisory
https://security.gentoo.org/glsa/201805-08

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 5.1.36>= 5.1.36
app-emulation/virtualbox-bin*< 5.1.36.122089>= 5.1.36.122089

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

An attacker could take control of VirtualBox resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, or other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-5.1.36"

All VirtualBox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-5.1.36.122089"

References

▸ GLSA 201802-01 VirtualBox: Multiple vulnerabilities this version unaffected high local, remote 2018-02-11

Multiple vulnerabilities have been found in VirtualBox, the worst of which could allow an attacker to take control of VirtualBox.

Announced
2018-02-11
Revised
2018-02-11
Access
local, remote
Bugs
#644894
Advisory
https://security.gentoo.org/glsa/201802-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 5.1.32>= 5.1.32
app-emulation/virtualbox-bin*< 5.1.32.120294>= 5.1.32.120294
app-emulation/virtualbox-guest-additions*< 5.1.32>= 5.1.32

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

An attacker could take control of VirtualBox resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, or other unspecified impacts.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-5.1.32"

All VirtualBox Binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-5.1.32.120294"

All VirtualBox Guest Additions users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-guest-additions-5.1.32"

References

▸ GLSA 201702-08 VirtualBox: Multiple vulnerabilities this version unaffected high local, remote 2017-02-14

Multiple vulnerabilities have been found in VirtualBox, the worst of which might allow unauthorized changes to some critical or all accessible data.

Announced
2017-02-14
Revised
2017-02-14
Access
local, remote
Bugs
#607674
Advisory
https://security.gentoo.org/glsa/201702-08

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 5.0.32>= 5.0.32

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

An attacker could cause a Denial of Service condition. Additionally, an attacker could create, delete or modify critical or all accessible data.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-5.0.32"

References

▸ GLSA 201612-27 VirtualBox: Multiple vulnerabilities this version unaffected normal local 2016-12-11

Multiple vulnerabilities have been found in VirtualBox, the worst of which allows local users to escalate privileges.

Announced
2016-12-11
Revised
2016-12-11 (revision 2)
Access
local
Bugs
#505274 #537218 #550964
Advisory
https://security.gentoo.org/glsa/201612-27

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 4.3.28>= 4.3.28
app-emulation/virtualbox-bin*< 4.3.28>= 4.3.28

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

Local attackers could cause a Denial of Service condition, execute arbitrary code, or escalate their privileges.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-4.3.28"

All VirtualBox-bin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-4.3.28"

References

▸ GLSA 201401-13 VirtualBox: Multiple Vulnerabilities this version unaffected high local 2014-01-20

Multiple vulnerabilities have been found in VirtualBox, allowing local attackers to escalate their privileges or cause a Denial of Service condition.

Announced
2014-01-20
Revised
2014-01-20
Access
local
Bugs
#434872 #498166
Advisory
https://security.gentoo.org/glsa/201401-13

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 4.2.22>= 4.2.22
app-emulation/virtualbox-bin*< 4.2.22>= 4.2.22

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple vulnerabilities have been discovered in Virtualbox. Please review the CVE identifiers referenced below for details.

Impact

A local attacker in a guest virtual machine may be able to escalate privileges or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All virtualbox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-4.2.22"

All virtualbox-bin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-4.2.22"

References

▸ GLSA 201204-01 VirtualBox: Multiple vulnerabilities this version unaffected normal local 2012-04-09

Multiple vulnerabilities were found in VirtualBox, allowing local attackers to gain escalated privileges.

Announced
2012-04-09
Revised
2012-04-09
Access
local
Bugs
#386317 #399807
Advisory
https://security.gentoo.org/glsa/201204-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/virtualbox*< 4.1.8>= 4.1.8
app-emulation/virtualbox-bin*< 4.1.8>= 4.1.4

Background

VirtualBox is a powerful virtualization product from Oracle.

Description

Multiple unspecified vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details.

Impact

A local attacker may be able to gain escalated privileges via unknown attack vectors.

Workaround

There is no known workaround at this time.

Resolution

All VirtualBox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/virtualbox-4.1.8"

All VirtualBox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/virtualbox-bin-4.1.8"

References