Lucene search
Ubuntu.comUB:CVE-2010-2237HistoryAug 19, 2010 - 12:00 a.m.
CVE-2010-2237
2010-08-1900:00:00
ubuntu.com
ubuntu.com
4
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:S/C:C/I:N/A:N
0.001 Low
EPSS
Percentile
26.6%
Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores
without referring to the user-defined main disk format, which might allow
guest OS users to read arbitrary files on the host OS, and possibly have
unspecified other impact, via unknown vectors.
Notes
| Author | Note |
|---|---|
| jdstrand | AppArmor 10.04 should mostly protect the host OS, but an attacker in a virtual machine may be able to access files of another machine. upstream patch is highly intrusive, needs rewriting for all affected releases, requires a conffile change and a migration helper. Ubuntu 10.04 LTS is the first release to probe the backing stores |
Related
cvelist
cvelist
CVE-2010-2237
2010-08-19 17:43:00
nvd
nvd
CVE-2010-2237
2010-08-19 18:00:03
cve
cve
CVE-2010-2237
2010-08-19 18:00:03
prion
prion
Format string
2010-08-19 18:00:00
debiancve
debiancve
CVE-2010-2237
2010-08-19 18:00:03
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-SU-2010:0625-1)
2014-06-13 00:00:00
Ubuntu 10.04 LTS : libvirt update (USN-1008-3)
2010-10-24 00:00:00
openSUSE Security Update : libvirt (openSUSE-SU-2010:0620-1)
2010-09-17 00:00:00
openvas
openvas
Ubuntu Update for libvirt update USN-1008-3
2010-10-26 00:00:00
Ubuntu Update for libvirt regression USN-1008-4
2010-11-16 00:00:00
Ubuntu Update for virtinst update USN-1008-2
2010-10-22 00:00:00
ubuntu
ubuntu
libvirt update
2010-10-23 00:00:00
libvirt regression
2010-11-08 00:00:00
libvirt vulnerabilities
2010-10-21 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: libvirt-0.8.2-1.fc12
2010-07-27 02:49:07
[SECURITY] Fedora 13 Update: libvirt-0.8.2-1.fc13
2010-07-27 02:37:00
securityvulns
securityvulns
[USN-1008-1] libvirt vulnerabilities
2010-10-28 00:00:00
libvirt library multiple security vulnerabilities
2010-10-28 00:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:S/C:C/I:N/A:N
0.001 Low
EPSS
Percentile
26.6%
Related for UB:CVE-2010-2237