CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
EPSS
Percentile
5.1%
libvirt, possibly before 0.9.12, does not properly assign USB devices to
virtual machines when multiple devices have the same vendor and product ID,
which might cause the wrong device to be associated with a guest and might
allow local users to access unintended USB devices.
Author | Note |
---|---|
jdstrand | need 3rd patch to fix a regression |
mdeslaur | need 4th patch to fix another regression possibly 5th patch for another regression we aren’t going to backport this, as it is intrusive. marking as ignored. |
www.openwall.com/lists/oss-security/2012/06/11/2
www.openwall.com/lists/oss-security/2012/06/11/3
launchpad.net/bugs/cve/CVE-2012-2693
nvd.nist.gov/vuln/detail/CVE-2012-2693
security-tracker.debian.org/tracker/CVE-2012-2693
www.cve.org/CVERecord?id=CVE-2012-2693
www.redhat.com/archives/libvir-list/2012-April/msg01494.html