CVE-2010-2784

2010-08-2418:00:39

CWE-264

redhat

web.nvd.nist.gov

cve-2010-2784

qemu-kvm

exec.c

subpage_register

kvm

red hat enterprise virtualization

rhev

denial of service

privilege escalation

nvd

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

25.1%

JSON

The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

redhatenterprise_virtualizationMatch2.2

redhatkvmMatch83

VendorProductVersionCPE
redhatenterprise_virtualization2.2cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*
redhatkvm83cpe:2.3:a:redhat:kvm:83:*:*:*:*:*:*:*