Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2010-2237
HistoryAug 19, 2010 - 6:00 p.m.

CVE-2010-2237

2010-08-1918:00:03
CWE-264
redhat
web.nvd.nist.gov
37
cve-2010-2237
red hat
libvirt
security vulnerability
guest os
arbitrary file read
disk backing store

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

26.5%

JSON

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected configurations

Nvd
Node
libvirtlibvirtMatch0.6.1
OR
libvirtlibvirtMatch0.6.2
OR
libvirtlibvirtMatch0.6.3
OR
libvirtlibvirtMatch0.6.4
OR
libvirtlibvirtMatch0.6.5
OR
libvirtlibvirtMatch0.7.0
OR
libvirtlibvirtMatch0.7.1
OR
libvirtlibvirtMatch0.7.2
OR
libvirtlibvirtMatch0.7.3
OR
libvirtlibvirtMatch0.7.4
OR
libvirtlibvirtMatch0.7.5
OR
libvirtlibvirtMatch0.7.6
OR
libvirtlibvirtMatch0.7.7
OR
libvirtlibvirtMatch0.8.0
OR
libvirtlibvirtMatch0.8.1
OR
libvirtlibvirtMatch0.8.2
VendorProductVersionCPE
libvirtlibvirt0.6.1cpe:2.3:a:libvirt:libvirt:0.6.1:*:*:*:*:*:*:*
libvirtlibvirt0.6.2cpe:2.3:a:libvirt:libvirt:0.6.2:*:*:*:*:*:*:*
libvirtlibvirt0.6.3cpe:2.3:a:libvirt:libvirt:0.6.3:*:*:*:*:*:*:*
libvirtlibvirt0.6.4cpe:2.3:a:libvirt:libvirt:0.6.4:*:*:*:*:*:*:*
libvirtlibvirt0.6.5cpe:2.3:a:libvirt:libvirt:0.6.5:*:*:*:*:*:*:*
libvirtlibvirt0.7.0cpe:2.3:a:libvirt:libvirt:0.7.0:*:*:*:*:*:*:*
libvirtlibvirt0.7.1cpe:2.3:a:libvirt:libvirt:0.7.1:*:*:*:*:*:*:*
libvirtlibvirt0.7.2cpe:2.3:a:libvirt:libvirt:0.7.2:*:*:*:*:*:*:*
libvirtlibvirt0.7.3cpe:2.3:a:libvirt:libvirt:0.7.3:*:*:*:*:*:*:*
libvirtlibvirt0.7.4cpe:2.3:a:libvirt:libvirt:0.7.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 161

Related

ubuntucve 1
prion 1
debiancve 1
cvelist 1
nvd 1
nessus 9
openvas 12
ubuntu 4
securityvulns 2
fedora 2
ubuntucve
ubuntucve
CVE-2010-2237
2010-08-19 00:00:00
prion
prion
Format string
2010-08-19 18:00:00
debiancve
debiancve
CVE-2010-2237
2010-08-19 18:00:03
cvelist
cvelist
CVE-2010-2237
2010-08-19 17:43:00
nvd
nvd
CVE-2010-2237
2010-08-19 18:00:03
nessus
nessus
Fedora 12 : libvirt-0.8.2-1.fc12 (2010-11021)
2010-07-27 00:00:00
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : libvirt vulnerabilities (USN-1008-1)
2010-10-22 00:00:00
Ubuntu 10.04 LTS : virtinst update (USN-1008-2)
2010-10-22 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1008-2)
2010-10-22 00:00:00
Ubuntu: Security Advisory (USN-1008-1)
2010-10-22 00:00:00
Ubuntu: Security Advisory (USN-1008-3)
2010-10-26 00:00:00
ubuntu
ubuntu
Virtinst update
2010-10-21 00:00:00
libvirt update
2010-10-23 00:00:00
libvirt vulnerabilities
2010-10-21 00:00:00
securityvulns
securityvulns
[USN-1008-1] libvirt vulnerabilities
2010-10-28 00:00:00
libvirt library multiple security vulnerabilities
2010-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: libvirt-0.8.2-1.fc12
2010-07-27 02:49:07
[SECURITY] Fedora 13 Update: libvirt-0.8.2-1.fc13
2010-07-27 02:37:00

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

26.5%

JSON
Related for CVE-2010-2237
ubuntucve1prion1debiancve1cvelist1nvd1nessus9openvas12ubuntu4securityvulns2fedora2