CVE Vulnerabilities

CVE-2010-2238

Published: Aug 19, 2010 | Modified: Oct 30, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:S/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected Software

Name Vendor Start Version End Version
Libvirt Libvirt 0.7.3 0.7.3
Libvirt Libvirt 0.8.1 0.8.1
Libvirt Libvirt 0.8.0 0.8.0
Libvirt Libvirt 0.7.6 0.7.6
Libvirt Libvirt 0.7.4 0.7.4
Libvirt Libvirt 0.7.7 0.7.7
Libvirt Libvirt 0.7.5 0.7.5
Libvirt Libvirt 0.7.2 0.7.2
Libvirt Libvirt 0.8.2 0.8.2

References