{"schemaVersion":3,"id":"MGASA-2024-0275","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated virtualbox & kmod-virtualbox packages fix security vulnerabilities\n\nEasily exploitable vulnerability allows high privileged attacker with\nlogon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange). Successful attacks of this vulnerability can result in takeover\nof Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality,\nIntegrity and Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","dates":{"published":"2024-07-29T18:26:26.000Z","modified":"2026-04-16T04:44:33.516Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"kmod-virtualbox","name":"kmod-virtualbox","label":"kmod-virtualbox","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/kmod-virtualbox","purlType":"rpm","versions":[{"text":"< 7.0.20-51.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.20-51.mga9","eol":null,"hubHref":null},{"vendor":"mageia","product":"virtualbox","name":"virtualbox","label":"virtualbox","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/virtualbox","purlType":"rpm","versions":[{"text":"< 7.0.20-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.20-1.mga9","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2024-0275.html","label":"advisories.mageia.org/MGASA-2024-0275.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33408","label":"bugs.mageia.org/show_bug.cgi?id=33408","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.oracle.com/security-alerts/cpujul2024.html#AppendixOVIR","label":"www.oracle.com/security-alerts/cpujul2024.html","hostname":"www.oracle.com","tags":["WEB"]},{"url":"https://www.virtualbox.org/wiki/Changelog-7.0#v20","label":"www.virtualbox.org/wiki/Changelog-7.0","hostname":"www.virtualbox.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-21141","CVE-2024-21161","CVE-2024-21164"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-07-29T18:26:26.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:44:33.516Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T18:06:33.164Z","stale":false,"partial":false}}