CVE Vulnerabilities

CVE-2010-2237

Published: Aug 19, 2010 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:S/C:C/I:N/A:N
RedHat/V2
4.4 MODERATE
AV:L/AC:M/Au:S/C:C/I:N/A:N
RedHat/V3
Ubuntu
LOW

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected Software

Name Vendor Start Version End Version
Libvirt Libvirt 0.6.1 (including) 0.6.1 (including)
Libvirt Libvirt 0.6.2 (including) 0.6.2 (including)
Libvirt Libvirt 0.6.3 (including) 0.6.3 (including)
Libvirt Libvirt 0.6.4 (including) 0.6.4 (including)
Libvirt Libvirt 0.6.5 (including) 0.6.5 (including)
Libvirt Libvirt 0.7.0 (including) 0.7.0 (including)
Libvirt Libvirt 0.7.1 (including) 0.7.1 (including)
Libvirt Libvirt 0.7.2 (including) 0.7.2 (including)
Libvirt Libvirt 0.7.3 (including) 0.7.3 (including)
Libvirt Libvirt 0.7.4 (including) 0.7.4 (including)
Libvirt Libvirt 0.7.5 (including) 0.7.5 (including)
Libvirt Libvirt 0.7.6 (including) 0.7.6 (including)
Libvirt Libvirt 0.7.7 (including) 0.7.7 (including)
Libvirt Libvirt 0.8.0 (including) 0.8.0 (including)
Libvirt Libvirt 0.8.1 (including) 0.8.1 (including)
Libvirt Libvirt 0.8.2 (including) 0.8.2 (including)
Libvirt Ubuntu devel *
Libvirt Ubuntu lucid *
Libvirt Ubuntu maverick *
Libvirt Ubuntu upstream *

References