Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2784
HistoryAug 24, 2010 - 12:00 a.m.

CVE-2010-2784

2010-08-2400:00:00
ubuntu.com
ubuntu.com
11

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.9%

The subpage MMIO initialization functionality in the subpage_register
function in exec.c in QEMU-KVM, as used in the Hypervisor (aka
rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM
83, does not properly select the index for access to the callback array,
which allows guest OS users to cause a denial of service (guest OS crash)
or possibly gain privileges via unspecified vectors.

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.9%