CVE catalog

CVE-2020-2914

UBUNTU-

[CVE catalog]

Virtualbox was updated to 6.0.22 (released May 15 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: Guest Additions: Build problems fix with Oracle Linux 8.2 (Red Hat compatible kernel) / Red Hat Enterprise Linux 8.2 / CentOS 8.2 (bug #19391) Guest Control/VBoxManage: fix handling of multiple environment variables supplied to 'VBoxManage guestcontrol VM run' (6.1.6/6.0.20 regression; bug #19518) Version bump to 6.0.20 (released April 14 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: - USB: Multiple enhancements improving prformance and stability - VBoxManage: Multiple fixes for guestcontrol command - Graphics: Enhancements in 2D and 3D acceleration and rendering - API: Fix for exception handling bug in Python bindings - Linux host and guest: Support Linux kernel 5.6 (bug #19312) This update fixes the following security issues: CVE-2020-2741, CVE-2020-2742, CVE-2020-2743, CVE-2020-2748, CVE-2020-2758, CVE-2020-2894, CVE-2020-2902, CVE-2020-2905, CVE-2020-2907, CVE-2020-2908, CVE-2020-2909, CVE-2020-2910, CVE-2020-2911, CVE-2020-2913, CVE-2020-2914, CVE-2020-2929, CVE-2020-2951, CVE-2020-2958, CVE-2020-2959 (bsc#1169628)

Severity
High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Opensuseleap 15.1virtualbox6.0.22-lp151.2.15.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0925-1]
Ubuntu20.04virtualbox6.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.0.14-dfsg-2~build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.0-dfsg-3build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.0-dfsg-3build2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.10-dfsg-1~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.16-dfsg-6~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.2-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.2-dfsg-1build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.4-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]

Showing 12 observations. All 76 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Opensuseleap 15.1virtualbox6.0.22-lp151.2.15.1UnknownSource applicability is not established[OPENSUSE-SU-2020:0925-1]
Ubuntu16.04virtualbox5.0.10-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.10-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.10-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.10-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.10-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.10-dfsg-6UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.10-dfsg-7UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.12-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.12-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.14-dfsg-2build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.16-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.16-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.18-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.18-dfsg-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.18-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.18-dfsg-2build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.18-dfsg-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.24-dfsg-0ubuntu1.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.32-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.36-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.40-dfsg-0ubuntu1.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.40-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.0.8-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.1.34-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.1.38-dfsg-0ubuntu1.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.1.38-dfsg-0ubuntu1.16.04.2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu16.04virtualbox5.1.38-dfsg-0ubuntu1.16.04.3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.1.30-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.0-dfsg-1build2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.0-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.0-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.0-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.10-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.10-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.10-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.10-dfsg-6UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.10-dfsg-6ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.18-dfsg-2~ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.18-dfsg-2~ubuntu18.04.3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.18-dfsg-2~ubuntu18.04.5UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.2-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.2-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.2-dfsg-3~build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.32-dfsg-0~ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.34-dfsg-0~ubuntu18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.4-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.42-dfsg-0~ubuntu1.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.6-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.6-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.6-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.6-dfsg-3build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.6-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.8-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.8-dfsg-3UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.8-dfsg-5UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.8-dfsg-6UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu18.04virtualbox5.2.8-dfsg-7UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.0.14-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.0.14-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.0.14-dfsg-2~build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.0-dfsg-3build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.0-dfsg-3build2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.10-dfsg-1~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.16-dfsg-6~ubuntu1.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.2-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.2-dfsg-1build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.4-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.4-dfsg-2UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.4-dfsg-2~build1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.4-dfsg-4UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Ubuntu20.04virtualbox6.1.6-dfsg-1UnknownSource applicability is not established[UBUNTU-CVE-2020-2914]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "virtualbox",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.22-lp151.2.15.1"
            }
          ]
        }
      ],
      "release": "leap 15.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2020:0925-1",
      "fixed_version": "6.0.22-lp151.2.15.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2020:0925-1",
      "provider_updated_at": "2026-02-04T02:52:28.517786Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "5.0.4-dfsg-2",
        "5.0.8-dfsg-1",
        "5.0.10-dfsg-1",
        "5.0.10-dfsg-2",
        "5.0.10-dfsg-3",
        "5.0.10-dfsg-4",
        "5.0.10-dfsg-5",
        "5.0.10-dfsg-6",
        "5.0.10-dfsg-7",
        "5.0.12-dfsg-1",
        "5.0.12-dfsg-2",
        "5.0.14-dfsg-1",
        "5.0.14-dfsg-2",
        "5.0.14-dfsg-2build1",
        "5.0.16-dfsg-2",
        "5.0.16-dfsg-3",
        "5.0.18-dfsg-1",
        "5.0.18-dfsg-1ubuntu1",
        "5.0.18-dfsg-2",
        "5.0.18-dfsg-2build1",
        "5.0.18-dfsg-2ubuntu1",
        "5.0.24-dfsg-0ubuntu1.16.04.1",
        "5.0.32-dfsg-0ubuntu1.16.04.2",
        "5.0.36-dfsg-0ubuntu1.16.04.2",
        "5.0.40-dfsg-0ubuntu1.16.04.1",
        "5.0.40-dfsg-0ubuntu1.16.04.2",
        "5.1.34-dfsg-0ubuntu1.16.04.2",
        "5.1.38-dfsg-0ubuntu1.16.04.1",
        "5.1.38-dfsg-0ubuntu1.16.04.2",
        "5.1.38-dfsg-0ubuntu1.16.04.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-2914",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-2914",
      "provider_updated_at": "2025-10-24T04:48:16Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "5.1.30-dfsg-1",
        "5.2.0-dfsg-1build2",
        "5.2.0-dfsg-2",
        "5.2.0-dfsg-4",
        "5.2.0-dfsg-5",
        "5.2.2-dfsg-2",
        "5.2.2-dfsg-3~build1",
        "5.2.2-dfsg-3",
        "5.2.4-dfsg-1",
        "5.2.4-dfsg-2",
        "5.2.6-dfsg-1",
        "5.2.6-dfsg-2",
        "5.2.6-dfsg-3",
        "5.2.6-dfsg-3build1",
        "5.2.6-dfsg-5",
        "5.2.8-dfsg-2",
        "5.2.8-dfsg-3",
        "5.2.8-dfsg-5",
        "5.2.8-dfsg-6",
        "5.2.8-dfsg-7",
        "5.2.10-dfsg-1",
        "5.2.10-dfsg-2",
        "5.2.10-dfsg-5",
        "5.2.10-dfsg-6",
        "5.2.10-dfsg-6ubuntu18.04.1",
        "5.2.18-dfsg-2~ubuntu18.04.1",
        "5.2.18-dfsg-2~ubuntu18.04.3",
        "5.2.18-dfsg-2~ubuntu18.04.5",
        "5.2.32-dfsg-0~ubuntu18.04.1",
        "5.2.34-dfsg-0~ubuntu18.04.1",
        "5.2.42-dfsg-0~ubuntu1.18.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-2914",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-2914",
      "provider_updated_at": "2025-10-24T04:48:16Z",
      "applicability_unknown": true
    },
    {
      "name": "virtualbox",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.16-dfsg-6~ubuntu1.20.04.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "6.0.14-dfsg-1",
        "6.0.14-dfsg-2~build1",
        "6.0.14-dfsg-2",
        "6.1.0-dfsg-3build1",
        "6.1.0-dfsg-3build2",
        "6.1.2-dfsg-1",
        "6.1.2-dfsg-1build1",
        "6.1.4-dfsg-1",
        "6.1.4-dfsg-2~build1",
        "6.1.4-dfsg-2",
        "6.1.4-dfsg-4",
        "6.1.6-dfsg-1",
        "6.1.10-dfsg-1~ubuntu1.20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-2914",
      "fixed_version": "6.1.16-dfsg-6~ubuntu1.20.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-2914",
      "provider_updated_at": "2025-10-24T04:48:16Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]