NVD

Id
15187  
Name
CVE-2010-3851  
Description
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-11-04  
Modified Date
2011-08-26  
Seq
2010-3851  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85384 15187 CVE-2010-3851 FEDORA-2010-16835  View
85385 15187 CVE-2010-3851 FEDORA-2010-17202  View
85386 15187 CVE-2010-3851 http://rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions/  View
85387 15187 CVE-2010-3851 RHSA-2011:0586  View
85388 15187 CVE-2010-3851 44166  View
85389 15187 CVE-2010-3851 ADV-2010-2874  View
85390 15187 CVE-2010-3851 ADV-2010-2963  View
85391 15187 CVE-2010-3851 https://bugzilla.redhat.com/show_bug.cgi?id=643958  View
85392 15187 CVE-2010-3851 [Libguestfs] 20101019 CVE-2010-3851libguestfs:missing disk format specifier when adding a disk  View
85393 15187 CVE-2010-3851 [Libguestfs] 20101021 [PATCH 0/2] First part of fix for CVE-2010-3851  View
85394 15187 CVE-2010-3851 [Libguestfs] 20101022 [PATCH 0/8 v2] Complete fix for CVE-2010-3851.  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37032 JVNDB-2010-002812 virt-v2v および virt-inspector などの製品に使用される libguestfs におけるホスト OS 上のファイルを読まれる脆弱性 virt-v2v および virt-inspector などの製品に使用される libguestfs には、ディスクフォーマット指定子の処理に関して不備があるため、raw フォーマットディスクイメージを処理した際、ホスト OS 上のファイルを読まれる脆弱性が存在します。 CVE-2010-3851 46431 CVE-2010-3851 15187 4.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002812.html 2010-11-04 2011-06-01 View