CVE-2010-2237
CVE-2010-2237
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html
- http://ubuntu.com/usn/usn-1008-2
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html
- http://libvirt.org/news.html
- http://ubuntu.com/usn/usn-1008-1
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
- http://ubuntu.com/usn/usn-1008-3
- https://bugzilla.redhat.com/show_bug.cgi?id=607810
- http://www.vupen.com/english/advisories/2010/2763
- https://nvd.nist.gov/vuln/detail/CVE-2010-2237