Lucene search

K
nvd[email protected]NVD:CVE-2010-2238
HistoryAug 19, 2010 - 6:00 p.m.

CVE-2010-2238

2010-08-1918:00:03
CWE-264
web.nvd.nist.gov
9

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

26.5%

Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.

Affected configurations

Nvd
Node
libvirtlibvirtMatch0.7.2
OR
libvirtlibvirtMatch0.7.3
OR
libvirtlibvirtMatch0.7.4
OR
libvirtlibvirtMatch0.7.5
OR
libvirtlibvirtMatch0.7.6
OR
libvirtlibvirtMatch0.7.7
OR
libvirtlibvirtMatch0.8.0
OR
libvirtlibvirtMatch0.8.1
OR
libvirtlibvirtMatch0.8.2
VendorProductVersionCPE
libvirtlibvirt0.7.2cpe:2.3:a:libvirt:libvirt:0.7.2:*:*:*:*:*:*:*
libvirtlibvirt0.7.3cpe:2.3:a:libvirt:libvirt:0.7.3:*:*:*:*:*:*:*
libvirtlibvirt0.7.4cpe:2.3:a:libvirt:libvirt:0.7.4:*:*:*:*:*:*:*
libvirtlibvirt0.7.5cpe:2.3:a:libvirt:libvirt:0.7.5:*:*:*:*:*:*:*
libvirtlibvirt0.7.6cpe:2.3:a:libvirt:libvirt:0.7.6:*:*:*:*:*:*:*
libvirtlibvirt0.7.7cpe:2.3:a:libvirt:libvirt:0.7.7:*:*:*:*:*:*:*
libvirtlibvirt0.8.0cpe:2.3:a:libvirt:libvirt:0.8.0:*:*:*:*:*:*:*
libvirtlibvirt0.8.1cpe:2.3:a:libvirt:libvirt:0.8.1:*:*:*:*:*:*:*
libvirtlibvirt0.8.2cpe:2.3:a:libvirt:libvirt:0.8.2:*:*:*:*:*:*:*

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

26.5%