CVE catalog

CVE-2024-21273

Security update for virtualbox

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 25, 2026

This update for virtualbox fixes the following issues: Update to release 7.1.4: * NAT: Fixed DHCP problems with certain guests when domain is empty * VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels * Linux Guest Additions: Introduce initial support for kernel 6.12 * EFI: Added missing LsiLogic MPT SCSI driver again to fix booting from devices attached to this device if the EFI firmware is used (7.1.0 regression) * EFI: Restored broken network boot support (7.1.0 regression) * Adressed CVE-2024-21248 [boo#1231735], CVE-2024-21273 [boo#1231736], CVE-2024-21259 [boo#1231737], CVE-2024-21263 [boo#1231738] - Make the Extension Pack work with our compiler flags and RT_NOEXCEPT choices. [boo#1231225] Update to release 7.1: * The GUI now offers a selection between Basic and Experienced user level with reduced or full UI functionality. * VRDE: If user does not set up TLS with custom certificates, enable it with self-signed certificate, including issuing a new one before the old one expires * NAT: New engine with IPv6 support. * Linux host and guest: Added Wayland support for Clipboard sharing. - Changed license from Gpl-2.0 to Gpl-3.0 Version bump to VirtualBox 7.0.20 (released July 16 2024 by Oracle)) This is a maintenance release. The following items were fixed and/or added: - TPM: Fixed errors appearing the event viewer with Windows guests - macOS Hosts: Fixed passing USB devices to the VM (bug #21218) - Audio: Fixed recording with HDA emulation after newer Windows 10 / 11 guests got rebooted - USB: Fixed a deadlock in OHCI triggered when saving the current state of a VM or taking a snapshot (bug #22059) - Linux Guest and Host: Introduced initial support for OpenSuse 15.6 kernel - Linux Guest and Host: Introduced initial support for RHEL 9.5 kernel (bug #22099) - Guest Additions: Shared Clipboard: Fixed issue when extra new lines were pasted when copying text between Win and X11 (bug #21716) - UEFI Secure Boot: Add new Microsoft certificates to list for new VMs

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susekbuildpackage hub 15 sp60.1.9998+svn3613-bp156.2.3.1fixed
Susevirtualboxpackage hub 15 sp67.1.4-lp156.2.4.1fixed
Susevirtualbox-kmppackage hub 15 sp67.1.4-lp156.2.4.1fixed
Opensusekbuildleap 15.60.1.9998+svn3613-bp156.2.3.1fixed
Opensusevirtualboxleap 15.67.1.4-lp156.2.4.1fixed
Opensusevirtualbox-kmpleap 15.67.1.4-lp156.2.4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susekbuildrpmpackage hub 15 sp60.1.9998+svn3613-bp156.2.3.1Not reportedOPENSUSE-SU-2024:0364-1Not reported
Susevirtualboxrpmpackage hub 15 sp67.1.4-lp156.2.4.1Not reportedOPENSUSE-SU-2024:0364-1Not reported
Susevirtualbox-kmprpmpackage hub 15 sp67.1.4-lp156.2.4.1Not reportedOPENSUSE-SU-2024:0364-1Not reported
Opensusekbuildrpmleap 15.60.1.9998+svn3613-bp156.2.3.1Not reportedOPENSUSE-SU-2024:0364-1Not reported
Opensusevirtualboxrpmleap 15.67.1.4-lp156.2.4.1Not reportedOPENSUSE-SU-2024:0364-1Not reported
Opensusevirtualbox-kmprpmleap 15.67.1.4-lp156.2.4.1Not reportedOPENSUSE-SU-2024:0364-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]