CVE catalog
CVE-2020-2959
UBUNTU-CVE-2020-2959
- Severity
- High · CVSS 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.69% · Oct 25, 2026
Virtualbox was updated to 6.0.22 (released May 15 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: Guest Additions: Build problems fix with Oracle Linux 8.2 (Red Hat compatible kernel) / Red Hat Enterprise Linux 8.2 / CentOS 8.2 (bug #19391) Guest Control/VBoxManage: fix handling of multiple environment variables supplied to 'VBoxManage guestcontrol VM run' (6.1.6/6.0.20 regression; bug #19518) Version bump to 6.0.20 (released April 14 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: - USB: Multiple enhancements improving prformance and stability - VBoxManage: Multiple fixes for guestcontrol command - Graphics: Enhancements in 2D and 3D acceleration and rendering - API: Fix for exception handling bug in Python bindings - Linux host and guest: Support Linux kernel 5.6 (bug #19312) This update fixes the following security issues: CVE-2020-2741, CVE-2020-2742, CVE-2020-2743, CVE-2020-2748, CVE-2020-2758, CVE-2020-2894, CVE-2020-2902, CVE-2020-2905, CVE-2020-2907, CVE-2020-2908, CVE-2020-2909, CVE-2020-2910, CVE-2020-2911, CVE-2020-2913, CVE-2020-2914, CVE-2020-2929, CVE-2020-2951, CVE-2020-2958, CVE-2020-2959 (bsc#1169628)
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Opensuse | virtualbox | leap 15.1 | 6.0.22-lp151.2.15.1 | fixed |
| Ubuntu | virtualbox | 16.04 | 5.0.4-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.8-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-4 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-6 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-7 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.12-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.12-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.14-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.14-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.14-dfsg-2build1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.16-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.16-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-1ubuntu1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-2build1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-2ubuntu1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.24-dfsg-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.32-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.36-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.40-dfsg-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.40-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.34-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.38-dfsg-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.38-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.38-dfsg-0ubuntu1.16.04.3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.1.30-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-1build2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-4 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.2-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.2-dfsg-3~build1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.2-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.4-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.4-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-3build1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-6 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-7 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-6 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-6ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.18-dfsg-2~ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.18-dfsg-2~ubuntu18.04.3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.18-dfsg-2~ubuntu18.04.5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.32-dfsg-0~ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.34-dfsg-0~ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.42-dfsg-0~ubuntu1.18.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.0.14-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.0.14-dfsg-2~build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.0.14-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.0-dfsg-3build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.0-dfsg-3build2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.2-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.2-dfsg-1build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-2~build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-4 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.6-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.10-dfsg-1~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.16-dfsg-6~ubuntu1.20.04.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Opensuse | virtualbox | rpm | leap 15.1 | 6.0.22-lp151.2.15.1 | Not reported | OPENSUSE-SU-2020:0925-1 | Not reported |
| Ubuntu | virtualbox | deb | 20.04 | 6.1.16-dfsg-6~ubuntu1.20.04.1 | Not reported | UBUNTU-CVE-2020-2959 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: