Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libvirt | Libvirt | 0.7.2 (including) | 0.7.2 (including) |
| Libvirt | Libvirt | 0.7.3 (including) | 0.7.3 (including) |
| Libvirt | Libvirt | 0.7.4 (including) | 0.7.4 (including) |
| Libvirt | Libvirt | 0.7.5 (including) | 0.7.5 (including) |
| Libvirt | Libvirt | 0.7.6 (including) | 0.7.6 (including) |
| Libvirt | Libvirt | 0.7.7 (including) | 0.7.7 (including) |
| Libvirt | Libvirt | 0.8.0 (including) | 0.8.0 (including) |
| Libvirt | Libvirt | 0.8.1 (including) | 0.8.1 (including) |
| Libvirt | Libvirt | 0.8.2 (including) | 0.8.2 (including) |
| Libvirt | Ubuntu | devel | * |
| Libvirt | Ubuntu | lucid | * |
| Libvirt | Ubuntu | maverick | * |
| Libvirt | Ubuntu | upstream | * |