Lucene search

K
nvd[email protected]NVD:CVE-2010-2239
HistoryAug 19, 2010 - 6:00 p.m.

CVE-2010-2239

2010-08-1918:00:03
CWE-264
web.nvd.nist.gov

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.

Affected configurations

NVD
Node
libvirtlibvirtMatch0.6.0
OR
libvirtlibvirtMatch0.6.1
OR
libvirtlibvirtMatch0.6.2
OR
libvirtlibvirtMatch0.6.3
OR
libvirtlibvirtMatch0.6.4
OR
libvirtlibvirtMatch0.6.5
OR
libvirtlibvirtMatch0.7.0
OR
libvirtlibvirtMatch0.7.1
OR
libvirtlibvirtMatch0.7.2
OR
libvirtlibvirtMatch0.7.3
OR
libvirtlibvirtMatch0.7.4
OR
libvirtlibvirtMatch0.7.5
OR
libvirtlibvirtMatch0.7.6
OR
libvirtlibvirtMatch0.7.7
OR
libvirtlibvirtMatch0.8.0
OR
libvirtlibvirtMatch0.8.1
OR
libvirtlibvirtMatch0.8.2

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%