Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2010-2238
HistoryAug 19, 2010 - 6:00 p.m.

CVE-2010-2238

2010-08-1918:00:03
CWE-264
redhat
web.nvd.nist.gov
49
red hat
libvirt
cve-2010-2238
security
vulnerability
file access

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

26.5%

JSON

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected configurations

Nvd
Node
libvirtlibvirtMatch0.7.2
OR
libvirtlibvirtMatch0.7.3
OR
libvirtlibvirtMatch0.7.4
OR
libvirtlibvirtMatch0.7.5
OR
libvirtlibvirtMatch0.7.6
OR
libvirtlibvirtMatch0.7.7
OR
libvirtlibvirtMatch0.8.0
OR
libvirtlibvirtMatch0.8.1
OR
libvirtlibvirtMatch0.8.2
VendorProductVersionCPE
libvirtlibvirt0.7.2cpe:2.3:a:libvirt:libvirt:0.7.2:*:*:*:*:*:*:*
libvirtlibvirt0.7.3cpe:2.3:a:libvirt:libvirt:0.7.3:*:*:*:*:*:*:*
libvirtlibvirt0.7.4cpe:2.3:a:libvirt:libvirt:0.7.4:*:*:*:*:*:*:*
libvirtlibvirt0.7.5cpe:2.3:a:libvirt:libvirt:0.7.5:*:*:*:*:*:*:*
libvirtlibvirt0.7.6cpe:2.3:a:libvirt:libvirt:0.7.6:*:*:*:*:*:*:*
libvirtlibvirt0.7.7cpe:2.3:a:libvirt:libvirt:0.7.7:*:*:*:*:*:*:*
libvirtlibvirt0.8.0cpe:2.3:a:libvirt:libvirt:0.8.0:*:*:*:*:*:*:*
libvirtlibvirt0.8.1cpe:2.3:a:libvirt:libvirt:0.8.1:*:*:*:*:*:*:*
libvirtlibvirt0.8.2cpe:2.3:a:libvirt:libvirt:0.8.2:*:*:*:*:*:*:*

Related

prion 2
debiancve 2
cvelist 2
ubuntucve 2
nvd 2
cve 1
ubuntu 5
openvas 14
securityvulns 3
nessus 10
fedora 2
prion
prion
Design/Logic Flaw
2010-08-19 18:00:00
Design/Logic Flaw
2011-08-10 20:55:00
debiancve
debiancve
CVE-2010-2238
2010-08-19 18:00:03
CVE-2011-2178
2011-08-10 20:55:01
cvelist
cvelist
CVE-2010-2238
2010-08-19 17:43:00
CVE-2011-2178
2011-08-10 20:00:00
ubuntucve
ubuntucve
CVE-2010-2238
2010-08-19 00:00:00
CVE-2011-2178
2011-06-10 00:00:00
nvd
nvd
CVE-2010-2238
2010-08-19 18:00:03
CVE-2011-2178
2011-08-10 20:55:01
cve
cve
CVE-2011-2178
2011-08-10 20:55:01
ubuntu
ubuntu
libvirt vulnerabilities
2011-06-16 00:00:00
Virtinst update
2010-10-21 00:00:00
libvirt update
2010-10-23 00:00:00
openvas
openvas
Ubuntu Update for libvirt USN-1152-1
2011-06-20 00:00:00
Ubuntu: Security Advisory (USN-1152-1)
2011-06-20 00:00:00
Fedora Update for libvirt FEDORA-2010-11021
2010-07-30 00:00:00
securityvulns
securityvulns
[USN-1152-1] libvirt vulnerabilities
2011-06-19 00:00:00
libvirt library multiple security vulnerabilities
2010-10-28 00:00:00
[USN-1008-1] libvirt vulnerabilities
2010-10-28 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 / 11.04 : libvirt vulnerabilities (USN-1152-1)
2011-06-17 00:00:00
Ubuntu 10.04 LTS : libvirt regression (USN-1008-4)
2010-11-09 00:00:00
Fedora 13 : libvirt-0.8.2-1.fc13 (2010-10960)
2010-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: libvirt-0.8.2-1.fc13
2010-07-27 02:37:00
[SECURITY] Fedora 12 Update: libvirt-0.8.2-1.fc12
2010-07-27 02:49:07

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

26.5%

JSON
Related for CVE-2010-2238
prion2debiancve2cvelist2ubuntucve2nvd2cve1ubuntu5openvas14securityvulns3nessus10fedora2