CVE catalog

CVE-2023-22098

Security update for virtualbox

[CVE catalog]

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Severity
High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.60% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Opensusetumbleweedvirtualbox7.0.12-1.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13355-1]
Opensuseleap 15.5virtualbox7.0.12-lp155.2.13.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0352-1]
Opensuseleap 15.5virtualbox-kmp7.0.12-lp155.2.13.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0352-1]
Opensuseleap 15.4virtualbox7.0.12-lp154.2.43.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0351-1]
Opensuseleap 15.4virtualbox-kmp7.0.12-lp154.2.43.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0351-1]
Ubuntu24.04virtualbox7.0.10-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.12-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.12-dfsg-1build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-4build4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]

Showing 12 observations. All 112 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Opensuseleap 15.4virtualbox7.0.12-lp154.2.43.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0351-1]
Opensuseleap 15.4virtualbox-kmp7.0.12-lp154.2.43.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0351-1]
Opensuseleap 15.5virtualbox7.0.12-lp155.2.13.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0352-1]
Opensuseleap 15.5virtualbox-kmp7.0.12-lp155.2.13.1UnknownSource applicability is not established[OPENSUSE-SU-2023:0352-1]
Opensusetumbleweedvirtualbox7.0.12-1.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13355-1]
Ubuntu16.04virtualbox5.0.10-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.10-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.10-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.10-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.10-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.10-dfsg-6UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.10-dfsg-7UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.12-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.12-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.14-dfsg-2build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.16-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.16-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.18-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.18-dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.18-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.18-dfsg-2build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.18-dfsg-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.24-dfsg-0ubuntu1.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.32-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.36-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.40-dfsg-0ubuntu1.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.40-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.0.8-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.1.34-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.1.38-dfsg-0ubuntu1.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.1.38-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu16.04virtualbox5.1.38-dfsg-0ubuntu1.16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.1.30-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.0-dfsg-1build2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.0-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.0-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.0-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.10-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.10-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.10-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.10-dfsg-6UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.10-dfsg-6ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.18-dfsg-2~ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.18-dfsg-2~ubuntu18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.18-dfsg-2~ubuntu18.04.5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.2-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.2-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.2-dfsg-3~build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.32-dfsg-0~ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.34-dfsg-0~ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.4-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.42-dfsg-0~ubuntu1.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.6-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.6-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.6-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.6-dfsg-3build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.6-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.8-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.8-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.8-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.8-dfsg-6UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu18.04virtualbox5.2.8-dfsg-7UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.0.14-dfsg-2~build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.0-dfsg-3build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.0-dfsg-3build2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.10-dfsg-1~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.16-dfsg-6~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.16-dfsg-6~ubuntu1.20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.2-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.2-dfsg-1build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.22-dfsg-2~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.26-dfsg-3~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.26-dfsg-3~ubuntu1.20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.32-dfsg-1~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.34-dfsg-3~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.38-dfsg-3~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.4-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.4-dfsg-2~build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.4-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.48-dfsg-1~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.50-dfsg-1~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu20.04virtualbox6.1.6-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.26-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.28-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.30-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.32-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.32-dfsg-1build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.34-dfsg-3~ubuntu1.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.38-dfsg-3~ubuntu1.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.48-dfsg-1~ubuntu1.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.50-dfsg-1~ubuntu1.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu22.04virtualbox6.1.50-dfsg-1~ubuntu1.22.04.3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.10-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.12-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.12-dfsg-1build1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-4build4UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.14-dfsg-4build5UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.16-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.16-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.16-dfsg-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.16-dfsg-2ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Ubuntu24.04virtualbox7.0.16-dfsg-2ubuntu1.3UnknownSource applicability is not established[UBUNTU-CVE-2023-22098]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "5.0.4-dfsg-2",
        "5.0.8-dfsg-1",
        "5.0.10-dfsg-1",
        "5.0.10-dfsg-2",
        "5.0.10-dfsg-3",
        "5.0.10-dfsg-4",
        "5.0.10-dfsg-5",
        "5.0.10-dfsg-6",
        "5.0.10-dfsg-7",
        "5.0.12-dfsg-1",
        "5.0.12-dfsg-2",
        "5.0.14-dfsg-1",
        "5.0.14-dfsg-2",
        "5.0.14-dfsg-2build1",
        "5.0.16-dfsg-2",
        "5.0.16-dfsg-3",
        "5.0.18-dfsg-1",
        "5.0.18-dfsg-1ubuntu1",
        "5.0.18-dfsg-2",
        "5.0.18-dfsg-2build1",
        "5.0.18-dfsg-2ubuntu1",
        "5.0.24-dfsg-0ubuntu1.16.04.1",
        "5.0.32-dfsg-0ubuntu1.16.04.2",
        "5.0.36-dfsg-0ubuntu1.16.04.2",
        "5.0.40-dfsg-0ubuntu1.16.04.1",
        "5.0.40-dfsg-0ubuntu1.16.04.2",
        "5.1.34-dfsg-0ubuntu1.16.04.2",
        "5.1.38-dfsg-0ubuntu1.16.04.1",
        "5.1.38-dfsg-0ubuntu1.16.04.2",
        "5.1.38-dfsg-0ubuntu1.16.04.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-22098",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-22098",
      "provider_updated_at": "2026-03-24T11:14:24.452232Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "5.1.30-dfsg-1",
        "5.2.0-dfsg-1build2",
        "5.2.0-dfsg-2",
        "5.2.0-dfsg-4",
        "5.2.0-dfsg-5",
        "5.2.2-dfsg-2",
        "5.2.2-dfsg-3~build1",
        "5.2.2-dfsg-3",
        "5.2.4-dfsg-1",
        "5.2.4-dfsg-2",
        "5.2.6-dfsg-1",
        "5.2.6-dfsg-2",
        "5.2.6-dfsg-3",
        "5.2.6-dfsg-3build1",
        "5.2.6-dfsg-5",
        "5.2.8-dfsg-2",
        "5.2.8-dfsg-3",
        "5.2.8-dfsg-5",
        "5.2.8-dfsg-6",
        "5.2.8-dfsg-7",
        "5.2.10-dfsg-1",
        "5.2.10-dfsg-2",
        "5.2.10-dfsg-5",
        "5.2.10-dfsg-6",
        "5.2.10-dfsg-6ubuntu18.04.1",
        "5.2.18-dfsg-2~ubuntu18.04.1",
        "5.2.18-dfsg-2~ubuntu18.04.3",
        "5.2.18-dfsg-2~ubuntu18.04.5",
        "5.2.32-dfsg-0~ubuntu18.04.1",
        "5.2.34-dfsg-0~ubuntu18.04.1",
        "5.2.42-dfsg-0~ubuntu1.18.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-22098",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-22098",
      "provider_updated_at": "2026-03-24T11:14:24.452232Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "6.0.14-dfsg-1",
        "6.0.14-dfsg-2~build1",
        "6.0.14-dfsg-2",
        "6.1.0-dfsg-3build1",
        "6.1.0-dfsg-3build2",
        "6.1.2-dfsg-1",
        "6.1.2-dfsg-1build1",
        "6.1.4-dfsg-1",
        "6.1.4-dfsg-2~build1",
        "6.1.4-dfsg-2",
        "6.1.4-dfsg-4",
        "6.1.6-dfsg-1",
        "6.1.10-dfsg-1~ubuntu1.20.04.1",
        "6.1.16-dfsg-6~ubuntu1.20.04.1",
        "6.1.16-dfsg-6~ubuntu1.20.04.2",
        "6.1.22-dfsg-2~ubuntu1.20.04.1",
        "6.1.26-dfsg-3~ubuntu1.20.04.1",
        "6.1.26-dfsg-3~ubuntu1.20.04.2",
        "6.1.32-dfsg-1~ubuntu1.20.04.1",
        "6.1.34-dfsg-3~ubuntu1.20.04.1",
        "6.1.38-dfsg-3~ubuntu1.20.04.1",
        "6.1.48-dfsg-1~ubuntu1.20.04.1",
        "6.1.50-dfsg-1~ubuntu1.20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-22098",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-22098",
      "provider_updated_at": "2026-03-24T11:14:24.452232Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "6.1.26-dfsg-4",
        "6.1.28-dfsg-1",
        "6.1.30-dfsg-1",
        "6.1.32-dfsg-1",
        "6.1.32-dfsg-1build1",
        "6.1.34-dfsg-3~ubuntu1.22.04.1",
        "6.1.38-dfsg-3~ubuntu1.22.04.1",
        "6.1.48-dfsg-1~ubuntu1.22.04.1",
        "6.1.50-dfsg-1~ubuntu1.22.04.1",
        "6.1.50-dfsg-1~ubuntu1.22.04.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-22098",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-22098",
      "provider_updated_at": "2026-03-24T11:14:24.452232Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "7.0.10-dfsg-3",
        "7.0.12-dfsg-1",
        "7.0.12-dfsg-1build1",
        "7.0.14-dfsg-1",
        "7.0.14-dfsg-2",
        "7.0.14-dfsg-4",
        "7.0.14-dfsg-4build4",
        "7.0.14-dfsg-4build5",
        "7.0.16-dfsg-1",
        "7.0.16-dfsg-2",
        "7.0.16-dfsg-2ubuntu1",
        "7.0.16-dfsg-2ubuntu1.1",
        "7.0.16-dfsg-2ubuntu1.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-22098",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-22098",
      "provider_updated_at": "2026-03-24T11:14:24.452232Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.12-lp154.2.43.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2023:0351-1",
      "fixed_version": "7.0.12-lp154.2.43.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2023:0351-1",
      "provider_updated_at": "2026-02-04T03:27:12.780244Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox-kmp",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.12-lp154.2.43.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2023:0351-1",
      "fixed_version": "7.0.12-lp154.2.43.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2023:0351-1",
      "provider_updated_at": "2026-02-04T03:27:12.780244Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.12-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:13355-1",
      "fixed_version": "7.0.12-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:13355-1",
      "provider_updated_at": "2026-02-04T03:06:31.984402Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.12-lp155.2.13.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2023:0352-1",
      "fixed_version": "7.0.12-lp155.2.13.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2023:0352-1",
      "provider_updated_at": "2026-02-04T03:05:02.359949Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox-kmp",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.12-lp155.2.13.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2023:0352-1",
      "fixed_version": "7.0.12-lp155.2.13.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2023:0352-1",
      "provider_updated_at": "2026-02-04T03:05:02.359949Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[openSUSE Tumbleweed]

  • [virtualbox]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 7.0.12-1.1

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-devel]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-guest-desktop-icons]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-guest-source]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-guest-tools]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-host-source]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-qt]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-vnc]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

  • [virtualbox-websrv]Unknown

    Source package: [virtualbox]

    Details (1)

    • 7.2.16-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 7.0.12-1.1

      Version impact unknown

      pypi · virtualbox · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]