NVD

Id
44410  
Name
CVE-2012-2693  
Description
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-16  
Modified Date
2013-01-14  
Seq
2012-2693  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222838 44410 CVE-2012-2693 RHSA-2012:0748  View
222839 44410 CVE-2012-2693 RHSA-2013:0127  View
222840 44410 CVE-2012-2693 [oss-security] 20120611 CVE request -- libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored  View
222841 44410 CVE-2012-2693 [oss-security] 20120611 Re: CVE request -- libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored  View
222842 44410 CVE-2012-2693 [libvirt] 20120428 [PATCH 0/3] usb devices with same vendor, productID hotplug support  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27076 JVNDB-2012-002783 libvirt における異なるデバイスを関連づける脆弱性 libvirt は、複数のデバイスのベンダ ID とプロダクト ID が同じであるとき、仮想マシンへの USB デバイスの割り当てを適切に行わないため、異なるデバイスをゲストに関連づける、およびローカルユーザにより、意図しない USB デバイスにアクセスされる脆弱性が存在します。 CVE-2012-2693 55931 CVE-2012-2693 44410 3.7 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002783.html 2012-06-17 2013-01-22 View