
CVE catalog
CVE-2021-2074
UBUNTU-CVE-2021-2074
- Severity
- High · CVSS 8.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.50% · Oct 25, 2026
This update for virtualbox fixes the following issues: Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: - Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts (bug #19315, #19561) - OCI integration: Cloud Instance parameters parsing is improved on import (bug #19156) - Network: UDP checksum offloading in e1000 no longer produces zero checksums (bug #19930) - Network: Fixed Host-Only Ethernet Adapter DHCP, guest os can not get IP on host resume (bug #19620) - NAT: Fixed mss parameter handing (bug #15256) - macOS host: Multiple optimizations for BigSur - Audio: Fixed issues with audio playback after host goes to sleep (bug #18594) - Documentation: Some content touch-up and table formatting fixes - Linux host and guest: Support kernel version 5.10 (bug #20055) - Solaris host: Fix regression breaking VGA text mode since version 6.1.0 - Guest Additions: Fixed a build failure affecting CentOS 8.2-2004 and later (bug #20091) - Guest Additions: Fixed a build failure affecting Linux kernels 3.2.0 through 3.2.50 (bug #20006) - Guest Additions: Fixed a VM segfault on copy with shared clipboard with X11 (bug #19226) - Shared Folder: Fixed error with remounting on Linux guests - Fixes CVE-2021-2074, boo#1181197 and CVE-2021-2129, boo#1181198. - Disable build of guest modules. These are included in recent kernels - Fix additional mouse control dialog issues.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Opensuse | virtualbox | leap 15.2 | 6.1.18-lp152.2.11.1 | fixed |
| Opensuse | virtualbox-kmp | leap 15.2 | 6.1.18-lp152.2.11.1 | fixed |
| Opensuse | virtualbox | leap 15.2 | 6.1.20-lp152.2.21.1 | fixed |
| Opensuse | virtualbox-kmp | leap 15.2 | 6.1.20-lp152.2.21.1 | fixed |
| Ubuntu | virtualbox | 16.04 | 5.0.4-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.8-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-4 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-6 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.10-dfsg-7 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.12-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.12-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.14-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.14-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.14-dfsg-2build1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.16-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.16-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-1ubuntu1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-2build1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.18-dfsg-2ubuntu1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.24-dfsg-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.32-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.36-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.40-dfsg-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.0.40-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.34-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.38-dfsg-0ubuntu1.16.04.1 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.38-dfsg-0ubuntu1.16.04.2 | vulnerable |
| Ubuntu | virtualbox | 16.04 | 5.1.38-dfsg-0ubuntu1.16.04.3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.1.30-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-1build2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-4 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.0-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.2-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.2-dfsg-3~build1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.2-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.4-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.4-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-3build1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.6-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-6 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.8-dfsg-7 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-6 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.10-dfsg-6ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.18-dfsg-2~ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.18-dfsg-2~ubuntu18.04.3 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.18-dfsg-2~ubuntu18.04.5 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.32-dfsg-0~ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.34-dfsg-0~ubuntu18.04.1 | vulnerable |
| Ubuntu | virtualbox | 18.04 | 5.2.42-dfsg-0~ubuntu1.18.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.0.14-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.0.14-dfsg-2~build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.0.14-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.0-dfsg-3build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.0-dfsg-3build2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.2-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.2-dfsg-1build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-2~build1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.4-dfsg-4 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.6-dfsg-1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.10-dfsg-1~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.16-dfsg-6~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.16-dfsg-6~ubuntu1.20.04.2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.22-dfsg-2~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.26-dfsg-3~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.26-dfsg-3~ubuntu1.20.04.2 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.32-dfsg-1~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.34-dfsg-3~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.38-dfsg-3~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.48-dfsg-1~ubuntu1.20.04.1 | vulnerable |
| Ubuntu | virtualbox | 20.04 | 6.1.50-dfsg-1~ubuntu1.20.04.1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Opensuse | virtualbox | rpm | leap 15.2 | 6.1.18-lp152.2.11.1 | Not reported | OPENSUSE-SU-2021:0165-1 | Not reported |
| Opensuse | virtualbox-kmp | rpm | leap 15.2 | 6.1.18-lp152.2.11.1 | Not reported | OPENSUSE-SU-2021:0165-1 | Not reported |
| Opensuse | virtualbox | rpm | leap 15.2 | 6.1.20-lp152.2.21.1 | Not reported | OPENSUSE-SU-2021:0630-1 | Not reported |
| Opensuse | virtualbox-kmp | rpm | leap 15.2 | 6.1.20-lp152.2.21.1 | Not reported | OPENSUSE-SU-2021:0630-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0165-1.json]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2021-2074]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:0165-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:0630-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]