p PatchFirst

CVE-2012-2693

CVE-2012-2693

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.

EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libvirt Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.12-1

    Update to 0.9.12-1

  • libvirt Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.12-1

    Update to 0.9.12-1

  • libvirt Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.12-1

    Update to 0.9.12-1

Original sources

Check your server →