openSUSE-SU-2022:0020-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0020-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2022:0020-1

Upstream

CVE-2022-21394

Related

CVE-2022-21394

Published

2022-01-24T17:01:04Z

Modified

2026-02-04T03:57:50Z

Summary

Security update for virtualbox

Details

This update for virtualbox fixes the following issues:

CVE-2022-21394: Fixed vulnerability where low privileged attacker could compromise Oracle VM VirtualBox. (boo#1194924)

References

Affected packages

openSUSE:Leap 15.3 / virtualbox

Package

Name: virtualbox
Purl: pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.1.32-lp153.2.21.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-virtualbox":  "6.1.32-lp153.2.21.1",
            "virtualbox":  "6.1.32-lp153.2.21.1",
            "virtualbox-devel":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-desktop-icons":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-source":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-tools":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-x11":  "6.1.32-lp153.2.21.1",
            "virtualbox-host-source":  "6.1.32-lp153.2.21.1",
            "virtualbox-kmp-default":  "6.1.32_k5.3.18_59.40-lp153.2.21.1",
            "virtualbox-kmp-preempt":  "6.1.32_k5.3.18_59.40-lp153.2.21.1",
            "virtualbox-qt":  "6.1.32-lp153.2.21.1",
            "virtualbox-vnc":  "6.1.32-lp153.2.21.1",
            "virtualbox-websrv":  "6.1.32-lp153.2.21.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0020-1.json"

openSUSE:Leap 15.3 / virtualbox-kmp

Package

Name: virtualbox-kmp
Purl: pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.1.32-lp153.2.21.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-virtualbox":  "6.1.32-lp153.2.21.1",
            "virtualbox":  "6.1.32-lp153.2.21.1",
            "virtualbox-devel":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-desktop-icons":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-source":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-tools":  "6.1.32-lp153.2.21.1",
            "virtualbox-guest-x11":  "6.1.32-lp153.2.21.1",
            "virtualbox-host-source":  "6.1.32-lp153.2.21.1",
            "virtualbox-kmp-default":  "6.1.32_k5.3.18_59.40-lp153.2.21.1",
            "virtualbox-kmp-preempt":  "6.1.32_k5.3.18_59.40-lp153.2.21.1",
            "virtualbox-qt":  "6.1.32-lp153.2.21.1",
            "virtualbox-vnc":  "6.1.32-lp153.2.21.1",
            "virtualbox-websrv":  "6.1.32-lp153.2.21.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0020-1.json"