CVE catalog

CVE-2021-2074

UBUNTU-CVE-2021-2074

[CVE catalog]

Severity
High · CVSS 8.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.50% · Oct 25, 2026

This update for virtualbox fixes the following issues: Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: - Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts (bug #19315, #19561) - OCI integration: Cloud Instance parameters parsing is improved on import (bug #19156) - Network: UDP checksum offloading in e1000 no longer produces zero checksums (bug #19930) - Network: Fixed Host-Only Ethernet Adapter DHCP, guest os can not get IP on host resume (bug #19620) - NAT: Fixed mss parameter handing (bug #15256) - macOS host: Multiple optimizations for BigSur - Audio: Fixed issues with audio playback after host goes to sleep (bug #18594) - Documentation: Some content touch-up and table formatting fixes - Linux host and guest: Support kernel version 5.10 (bug #20055) - Solaris host: Fix regression breaking VGA text mode since version 6.1.0 - Guest Additions: Fixed a build failure affecting CentOS 8.2-2004 and later (bug #20091) - Guest Additions: Fixed a build failure affecting Linux kernels 3.2.0 through 3.2.50 (bug #20006) - Guest Additions: Fixed a VM segfault on copy with shared clipboard with X11 (bug #19226) - Shared Folder: Fixed error with remounting on Linux guests - Fixes CVE-2021-2074, boo#1181197 and CVE-2021-2129, boo#1181198. - Disable build of guest modules. These are included in recent kernels - Fix additional mouse control dialog issues.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensusevirtualboxleap 15.26.1.18-lp152.2.11.1fixed
Opensusevirtualbox-kmpleap 15.26.1.18-lp152.2.11.1fixed
Opensusevirtualboxleap 15.26.1.20-lp152.2.21.1fixed
Opensusevirtualbox-kmpleap 15.26.1.20-lp152.2.21.1fixed
Ubuntuvirtualbox16.045.0.4-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.8-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-3vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-4vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-5vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-6vulnerable
Ubuntuvirtualbox16.045.0.10-dfsg-7vulnerable
Ubuntuvirtualbox16.045.0.12-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.12-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.14-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.14-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.14-dfsg-2build1vulnerable
Ubuntuvirtualbox16.045.0.16-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.16-dfsg-3vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-1vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-1ubuntu1vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-2vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-2build1vulnerable
Ubuntuvirtualbox16.045.0.18-dfsg-2ubuntu1vulnerable
Ubuntuvirtualbox16.045.0.24-dfsg-0ubuntu1.16.04.1vulnerable
Ubuntuvirtualbox16.045.0.32-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.0.36-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.0.40-dfsg-0ubuntu1.16.04.1vulnerable
Ubuntuvirtualbox16.045.0.40-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.1.34-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.1.38-dfsg-0ubuntu1.16.04.1vulnerable
Ubuntuvirtualbox16.045.1.38-dfsg-0ubuntu1.16.04.2vulnerable
Ubuntuvirtualbox16.045.1.38-dfsg-0ubuntu1.16.04.3vulnerable
Ubuntuvirtualbox18.045.1.30-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-1build2vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-4vulnerable
Ubuntuvirtualbox18.045.2.0-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-3~build1vulnerable
Ubuntuvirtualbox18.045.2.2-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.4-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.4-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-3build1vulnerable
Ubuntuvirtualbox18.045.2.6-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-3vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-6vulnerable
Ubuntuvirtualbox18.045.2.8-dfsg-7vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-1vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-2vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-5vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-6vulnerable
Ubuntuvirtualbox18.045.2.10-dfsg-6ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.3vulnerable
Ubuntuvirtualbox18.045.2.18-dfsg-2~ubuntu18.04.5vulnerable
Ubuntuvirtualbox18.045.2.32-dfsg-0~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.34-dfsg-0~ubuntu18.04.1vulnerable
Ubuntuvirtualbox18.045.2.42-dfsg-0~ubuntu1.18.04.1vulnerable
Ubuntuvirtualbox20.046.0.14-dfsg-1vulnerable
Ubuntuvirtualbox20.046.0.14-dfsg-2~build1vulnerable
Ubuntuvirtualbox20.046.0.14-dfsg-2vulnerable
Ubuntuvirtualbox20.046.1.0-dfsg-3build1vulnerable
Ubuntuvirtualbox20.046.1.0-dfsg-3build2vulnerable
Ubuntuvirtualbox20.046.1.2-dfsg-1vulnerable
Ubuntuvirtualbox20.046.1.2-dfsg-1build1vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-1vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-2~build1vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-2vulnerable
Ubuntuvirtualbox20.046.1.4-dfsg-4vulnerable
Ubuntuvirtualbox20.046.1.6-dfsg-1vulnerable
Ubuntuvirtualbox20.046.1.10-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.16-dfsg-6~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.16-dfsg-6~ubuntu1.20.04.2vulnerable
Ubuntuvirtualbox20.046.1.22-dfsg-2~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.26-dfsg-3~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.26-dfsg-3~ubuntu1.20.04.2vulnerable
Ubuntuvirtualbox20.046.1.32-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.34-dfsg-3~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.38-dfsg-3~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.48-dfsg-1~ubuntu1.20.04.1vulnerable
Ubuntuvirtualbox20.046.1.50-dfsg-1~ubuntu1.20.04.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensusevirtualboxrpmleap 15.26.1.18-lp152.2.11.1Not reportedOPENSUSE-SU-2021:0165-1Not reported
Opensusevirtualbox-kmprpmleap 15.26.1.18-lp152.2.11.1Not reportedOPENSUSE-SU-2021:0165-1Not reported
Opensusevirtualboxrpmleap 15.26.1.20-lp152.2.21.1Not reportedOPENSUSE-SU-2021:0630-1Not reported
Opensusevirtualbox-kmprpmleap 15.26.1.20-lp152.2.21.1Not reportedOPENSUSE-SU-2021:0630-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References