Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2010-2238
HistoryAug 19, 2010 - 6:00 p.m.

CVE-2010-2238

2010-08-1918:00:03
Debian Security Bug Tracker
security-tracker.debian.org
20

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

EPSS

0.001

Percentile

26.5%

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

EPSS

0.001

Percentile

26.5%