CVE-2012-2693

2012-06-1700:00:00

ubuntu.com

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

JSON

libvirt, possibly before 0.9.12, does not properly assign USB devices to
virtual machines when multiple devices have the same vendor and product ID,
which might cause the wrong device to be associated with a guest and might
allow local users to access unintended USB devices.

Bugs

Notes

Author	Note
jdstrand	need 3rd patch to fix a regression
mdeslaur	need 4th patch to fix another regression possibly 5th patch for another regression we aren’t going to backport this, as it is intrusive. marking as ignored.