CVE catalog

CVE-2022-39422

UBUNTU-CVE-2022-39422

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuvirtualbox18.045.1.30-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-1build2vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-4vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-3~build1vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.4-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.4-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-3build1vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-6vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-7vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-6vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-6ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.3vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.5vulnerable
Ubuntuvirtualbox18.045.2.32-dfsg-0~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.34-dfsg-0~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.42-dfsg-0~ubuntu1.18.04.1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References