Lucene search

K
nvd[email protected]NVD:CVE-2010-2784
HistoryAug 24, 2010 - 6:00 p.m.

CVE-2010-2784

2010-08-2418:00:39
CWE-264
web.nvd.nist.gov
8

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

25.1%

The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.

Affected configurations

Nvd
Node
redhatenterprise_virtualizationMatch2.2
OR
redhatkvmMatch83

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

25.1%