CVE

Id
44822  
CVE No.
CVE-2010-2238  
Status
Candidate  
Description
Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.  
Phase
Assigned (20100609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489648 44822 CVE-2010-2238 MISC:http://libvirt.org/news.html  View
489649 44822 CVE-2010-2238 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=607811  View
489650 44822 CVE-2010-2238 FEDORA:FEDORA-2010-10960  View
489651 44822 CVE-2010-2238 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html  View
489652 44822 CVE-2010-2238 FEDORA:FEDORA-2010-11021  View
489653 44822 CVE-2010-2238 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html  View
489654 44822 CVE-2010-2238 SUSE:SUSE-SR:2010:017  View
489655 44822 CVE-2010-2238 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
489656 44822 CVE-2010-2238 UBUNTU:USN-1008-1  View
489657 44822 CVE-2010-2238 URL:http://ubuntu.com/usn/usn-1008-1  View
489658 44822 CVE-2010-2238 UBUNTU:USN-1008-2  View
489659 44822 CVE-2010-2238 URL:http://ubuntu.com/usn/usn-1008-2  View
489660 44822 CVE-2010-2238 UBUNTU:USN-1008-3  View
489661 44822 CVE-2010-2238 URL:http://ubuntu.com/usn/usn-1008-3  View
489662 44822 CVE-2010-2238 VUPEN:ADV-2010-2763  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36158 JVNDB-2010-001938 libvirt における任意のファイルを読まれる脆弱性 libvirt には、特権のソースポートの不適切なマッピングを用いて iptables ルールを作成してしまう不備があるため、 IP アドレスおよびソースポートの値により、アクセス制限を回避される脆弱性が存在します。 CVE-2010-2242 44822 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001938.html  View