Lucene search

K
cve[email protected]CVE-2010-2784
HistoryAug 24, 2010 - 6:00 p.m.

CVE-2010-2784

2010-08-2418:00:00
CWE-264
web.nvd.nist.gov
32
cve-2010-2784
qemu-kvm
exec.c
subpage_register
kvm
red hat enterprise virtualization
rhev
denial of service
privilege escalation
nvd

7.6 High

AI Score

Confidence

High

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.9%

The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.

7.6 High

AI Score

Confidence

High

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.9%